preprod-karnkraft.vattenfall.se

Issued by AlphaSSL CA - SHA256 - G4

About this certificate

This digital certificate with serial number 3f:be:ba:f1:d4:52:1e:1f:c7:d1:8e:71 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=preprod-karnkraft.vattenfall.se

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 3f:be:ba:f1:d4:52:1e:1f:c7:d1:8e:71
Serial Number (int): 19728134345601978396843282033
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 59:9d:24:6c:3e:1c:b0:cf:10:c7:32:d1:e8:d2:5b:9e:f5:54:30:0f
AuthorityKeyId: 4f:cb:ac:a8:c2:ef:ab:dd:83:6f:6b:bf:ce:98:3d:5c:58:25:76:15

Fingerprint (sha1): 2b:0f:77:87:3f:da:c7:3e:ff:cf:70:1f:6c:cd:1e:5a:e2:32:89:22
Fingerprint (sha256): 17:db:18:4d:95:47:ca:bf:a9:32:df:e1:f4:40:02:aa:87:f8:3d:89:ae:79:b7:68:f5:45:5a:96:4d:e0:a8:95

Issuing Certificate URL: http://secure.globalsign.com/cacert/alphasslcasha256g4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/alphasslcasha256g4
CRL Distribution Point: http://crl.globalsign.com/alphasslcasha256g4.crl

Check the revocation status for certificate preprod-karnkraft.vattenfall.se

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for preprod-karnkraft.vattenfall.se

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

preprod-karnkraft.vattenfall.se

Other certificates including the domain name vattenfall.se

(limited to 100 certificates)
solcellsguiden.vattenfall.se
bastpocket.vattenfall.se
www.vattenfall.se
ssl418473.cloudflaressl.com
selfserviceapi.vfretail-web-local.vattenfall.se
powerplants.vattenfall.com
autodiscover.vattenfall.com
incharge.vattenfall.se
energyplaza.vattenfall.se
ssl418475.cloudflaressl.com
ssl418475.cloudflaressl.com
heatbusinessportal.vattenfall.se
selfserviceapi.vfretail-web-dev.vattenfall.se
prelive-eshop.vattenfall.se
powerplants.vattenfall.com
energyplazaupdates.vattenfall.se
energysiteplus.vattenfall.se
powerplants.vattenfall.com
effektreserven.vattenfall.se
ssl418473.cloudflaressl.com
ssl418473.cloudflaressl.com
hydroinfoportal.vattenfall.se
electricpriceplus.vattenfall.se
webworkplace.vattenfall.se
corporate.vattenfall.se
energyplaza.vattenfall.se
bastpocketpda.vattenfall.se
vcr-tst.goincharge.com
powerplants.vattenfall.com
energyplazaupdates.vattenfall.se
*.vattenfall.se

energifragan.vattenfall.se
ssl418473.cloudflaressl.com
energyplazaupdates.vattenfall.se
preprod-karnkraft.vattenfall.se
www.vattenfall.se
csg.vattenfall.se
*.vattenfall.se
www2.vattenfall.se
auth.vattenfall.se
ssl418475.cloudflaressl.com
vcr.goincharge.com
corporate.vattenfall.se
energibutik.vattenfall.se
ssl418475.cloudflaressl.com
energifragan.vattenfall.se
powerplants.vattenfall.com
preedit-eshop.vattenfall.se
projekt.vattenfall.se
live-energibutik.vattenfall.se
ssl418473.cloudflaressl.com
ssl418474.cloudflaressl.com
fiskevatten.vattenfall.se
kundforum.vattenfall.se
energibutik.vattenfall.se
kundforum.vattenfall.se
flex-tst.vattenfall.se
www2.vattenfall.se
ssl418475.cloudflaressl.com
ssl418473.cloudflaressl.com
www2.vattenfall.se
solcellsguiden-test.vattenfall.se
www2.vattenfall.se
powerplants.vattenfall.com
edit-eshop.vattenfall.se
webworkplace.vattenfall.se
pihydro.vattenfall.se
vattenfall.se
ssl418475.cloudflaressl.com
energiexperten.vattenfall.se
ssl418475.cloudflaressl.com
powerplants.vattenfall.com
webworkplace.vattenfall.se
demo-energysiteplus.vattenfall.se
*.vattenfall.se
flex-acc.vattenfall.se
fiskevatten.vattenfall.se
ssl418474.cloudflaressl.com
elements.vattenfall.se
www2.vattenfall.se
kundforum.vattenfall.se
powerplants.vattenfall.com
powerplants.vattenfall.com
vcr.goincharge.com
applications.vattenfall.se
ssl418474.cloudflaressl.com
*.vattenfall.se
ssl418475.cloudflaressl.com
live-energibutik.vattenfall.se
energyplazaupdates.vattenfall.se
vattenfall.se
www.vattenfall.se
hydroinforportaldev.vattenfall.se
energifragan.vattenfall.se
portal-dev.incharge.vattenfall.se
energyplazaupdates.vattenfall.se
oh-acc.vattenfall.se
beta.vattenfall.se
sni.cloudflaressl.com

Certificate

The complete raw certificate details for preprod-karnkraft.vattenfall.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIMP7668dRSHh/H0Y5xMA0GCSqGSIb3DQEBCwUAMEwxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB
bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEc0MB4XDTIzMTIwNTA5NTUwOFoXDTI1MDEw
NTA5NTUwN1owKjEoMCYGA1UEAxMfcHJlcHJvZC1rYXJua3JhZnQudmF0dGVuZmFs
bC5zZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMevOyD1tp004/JN
ZWQPeld2ZYQVLdtK4y3LLGdyMAoTLxln9OvXAz3qREZT7H9DWWVUPbdIeuUmsUIf
1sIymRPQLEVylm7ItSAtLeR1zeCXt/W1TkS4YnutuKt7cu5SS+Vnz2Ti6I6z8qkS
Vr0hrsrC1PjYn11baD+FEC4Bicj5WIjhio2oQtqsGi6PMjukgbtC2eHUih43lhS2
XLhPHxlSPtt4FFC4Ruyt2lrgNJNEak5WBmZWlqJve2CaOBgNebvW3Ep+ywmNa7lm
XkVcpBTFJKBGjaP6CkRW0IJw04W1WIYRWBih0M6grZT99F0j4yDPAMrYd8kcd7+p
XBqBikkCAwEAAaOCAfQwggHwMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAA
MIGTBggrBgEFBQcBAQSBhjCBgzBGBggrBgEFBQcwAoY6aHR0cDovL3NlY3VyZS5n
bG9iYWxzaWduLmNvbS9jYWNlcnQvYWxwaGFzc2xjYXNoYTI1Nmc0LmNydDA5Bggr
BgEFBQcwAYYtaHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vYWxwaGFzc2xjYXNo
YTI1Nmc0MFcGA1UdIARQME4wCAYGZ4EMAQIBMEIGCisGAQQBoDIKAQMwNDAyBggr
BgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8w
QQYDVR0fBDowODA2oDSgMoYwaHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9hbHBo
YXNzbGNhc2hhMjU2ZzQuY3JsMCoGA1UdEQQjMCGCH3ByZXByb2Qta2FybmtyYWZ0
LnZhdHRlbmZhbGwuc2UwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8G
A1UdIwQYMBaAFE/LrKjC76vdg29rv86YPVxYJXYVMB0GA1UdDgQWBBRZnSRsPhyw
zxDHMtHo0lue9VQwDzATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAiC/CQtFJfgCs9HmFVcyPq5K32A604iQn00FuXXNfynT6iXbkHjS+LQMx
NBorrHNstZA9+t6Vcc99SHsr5uu7XFaYdZwGEcsEURyITXCjr3moWXGeDHVmYRa9
BgkUu642muQKrnYrezUqlsr1xd879C4QwIqAKMCqq8pGyKZLh4RFmMrou6ECdyjU
xbqfBbkJTfioYWEfp3+rk6PjzEcY2g35rUs7cYWwBSbLnM5SbJN9NCnDHFtUD7cv
jQIy6jpPchilLf3Q8KcigJfXiS9yTeKfs97ogsfhsJ9qBLnosBRLjKowjhkDA5L7
D4F7PeXY1Ux69JhwjeuJYsKCQVgB9Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx687IPW2nTTj8k1lZA96
V3ZlhBUt20rjLcssZ3IwChMvGWf069cDPepERlPsf0NZZVQ9t0h65SaxQh/WwjKZ
E9AsRXKWbsi1IC0t5HXN4Je39bVORLhie624q3ty7lJL5WfPZOLojrPyqRJWvSGu
ysLU+NifXVtoP4UQLgGJyPlYiOGKjahC2qwaLo8yO6SBu0LZ4dSKHjeWFLZcuE8f
GVI+23gUULhG7K3aWuA0k0RqTlYGZlaWom97YJo4GA15u9bcSn7LCY1ruWZeRVyk
FMUkoEaNo/oKRFbQgnDThbVYhhFYGKHQzqCtlP30XSPjIM8Ayth3yRx3v6lcGoGK
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19728134345601978396843282033
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 09:55:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-05 09:55:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'preprod-karnkraft.vattenfall.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25207832300909916051536412810338354701456958219313240674880386579938591902953762131567122281995285542759758455667266404811285451091309980956733988623303715729053333149839453260043649170735836442631093346051752734042693959220560114214399354570305929788402055365631002042739291028606925948587419653157769093422261271437832061980285415320497399990439600068637036945441705131384012870473335456507473959134017505173698542590441520782451600778359465166186295467863824246769706948812349365652831511541873924376412041008756999168065433644917755845927480932270067621452555791576817703809363946037610005481680899551814515526217
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/alphasslcasha256g4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/alphasslcasha256g4'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/alphasslcasha256g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-karnkraft.vattenfall.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4fcbaca8c2efabdd836f6bbfce983d5c58257615
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							599d246c3e1cb0cf10c732d1e8d25b9ef554300f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00882fc242d1497e00acf4798555cc8fab92b7d80eb4e22427d3416e5d735fca74fa8976e41e34be2d0331341a2bac736cb5903dfade9571cf7d487b2be6ebbb5c5698759c0611cb04511c884d70a3af79a859719e0c75666116bd060914bbae369ae40aae762b7b352a96caf5c5df3bf42e10c08a8028c0aaabca46c8a64b87844598cae8bba1027728d4c5ba9f05b9094df8a861611fa77fab93a3e3cc4718da0df9ad4b3b7185b00526cb9cce526c937d3429c31c5b540fb72f8d0232ea3a4f7218a52dfdd0f0a7228097d7892f724de29fb3dee882c7e1b09f6a04b9e8b0144b8caa308e19030392fb0f817b3de5d8d54c7af498708deb8962c282415801f5