www.hydronicinnovations.ca

- CloudFlare, Inc. -

Issued by CloudFlare Inc RSA CA-1

About this certificate

This digital certificate with serial number 0f:4a:c2:7f:34:cf:2a:87:54:84:fb:b6:06:4f:98:62 was issued on by CloudFlare, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CloudFlare, Inc.

Organization: CloudFlare, Inc.
State / Province: CA
Locality: San Francisco
Country: US

CloudFlare, Inc.

Organization: CloudFlare, Inc.
State / Province: CA
Locality: San Francisco
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:4a:c2:7f:34:cf:2a:87:54:84:fb:b6:06:4f:98:62
Serial Number (int): 20326594770088732064864654423460124770
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: aa:bd:f4:fc:4a:c1:d6:33:26:cd:7c:e2:de:e5:db:43:24:9d:25:1f
AuthorityKeyId: 91:05:8a:df:4c:22:c6:6d:8b:94:4c:16:45:7e:ee:6f:02:fb:b7:c0

Fingerprint (sha1): 80:95:41:71:f4:42:2c:89:60:3a:36:2a:42:c8:df:3a:ae:35:77:d5
Fingerprint (sha256): 20:da:64:2a:af:70:c1:7a:6f:2f:c3:25:70:9c:c0:81:2a:19:03:9a:c0:cb:d3:14:f9:90:49:12:99:da:5f:45

Issuing Certificate URL: http://cacerts.digicert.com/CloudFlareIncRSACA-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/CloudFlareIncRSACA1.crl
CRL Distribution Point: http://crl4.digicert.com/CloudFlareIncRSACA1.crl

Check the revocation status for certificate www.hydronicinnovations.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hydronicinnovations.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.hydronicinnovations.ca

Other certificates including the domain name hydronicinnovations.ca

(limited to 100 certificates)
hydronicinnovations.ca
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
www.hydronicinnovations.ca
sni136778.cloudflaressl.com
www.hydronicinnovations.ca
sni136778.cloudflaressl.com
webmail.hydronicinnovations.ca
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
webmail.hydronicinnovations.ca
sni136778.cloudflaressl.com
webprotect.hydronicinnovations.ca
sni136778.cloudflaressl.com
hydronicinnovations.ca
webmail.hydronicinnovations.ca
www.hydronicinnovations.ca
sni136778.cloudflaressl.com
webmail.hydronicinnovations.ca
sni136778.cloudflaressl.com
www.hydronicinnovations.ca
hydronicinnovations.ca
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
www.hydronicinnovations.ca
www.hydronicinnovations.ca
m.hydronicinnovations.ca
m.hydronicinnovations.ca
sni136778.cloudflaressl.com
www.hydronicinnovations.ca
sni136778.cloudflaressl.com
yqdnwgf35xt4.hydronicinnovations.ca
webmail.hydronicinnovations.ca
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
www.hydronicinnovations.ca
yqdnwgf35xt4.hydronicinnovations.ca
sni136778.cloudflaressl.com
www.hydronicinnovations.ca
sni136778.cloudflaressl.com
www.hydronicinnovations.ca
sni136778.cloudflaressl.com
www.hydronicinnovations.ca
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
www.hydronicinnovations.ca
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
webmail.hydronicinnovations.ca
m.hydronicinnovations.ca
www.hydronicinnovations.ca
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
www.hydronicinnovations.ca
www.hydronicinnovations.ca
yqdnwgf35xt4.hydronicinnovations.ca
webmail.hydronicinnovations.ca
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni.cloudflaressl.com
sni136778.cloudflaressl.com
hydronicinnovations.ca
www.hydronicinnovations.ca
sni136778.cloudflaressl.com
hydronicinnovations.ca
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
hydronicinnovations.ca
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
sni136778.cloudflaressl.com
m.hydronicinnovations.ca
www.hydronicinnovations.ca

Certificate

The complete raw certificate details for www.hydronicinnovations.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WuWo0gmBrr4/vfJ0Yq8
Y1haeXph5paTypA/q5o4cWtd0nZJ9Q7cdxFP+1BsBCY8KEEFKlzNS3W3YrOc7IcT
THuLrXMUDbR70jiZx2nExBNkbpRffrAkzeXZfxlPXgBxfAl8aW1mQi5IGMnltsuR
HCDh6lorgNdSkRa+vQl0tUrj52EMjncWHfzWA/oTEB/WtmMDAY2uHe/ESwkhkgaJ
tUwEJimrzXBLVhMHoI8kN3/NeL+/X+tp65X55kutY+K5bhi1UjpYfErkOGvPg4Gl
Igj+95XgjSJ/iWn0iSaB9WRJ1fFwBQ1DYrshKffGYdVch+2wzj086AGwD5vsxy+0
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20326594770088732064864654423460124770
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare Inc RSA CA-1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hydronicinnovations.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26436859569581157378292969645999998018572601546452473519310271297567414357656255587198086047782067286128587191231608642332944338489052960977213362028931142145324331531131905819527363472899455979604518293072903427608912776091614769796602507678874171694051691040155968103463684099904834156208070200277767538624035269586176136164848292727471870391956215217450929398118479216755377605671319397530498377116279583651033230649854636667414382203104889633365481069382814245298966671775007671390863322510320629910187746230903202068927774763409644917435601762074007805454186946258313486624109363798897277918767221873081295287427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 91058adf4c22c66d8b944c16457eee6f02fbb7c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aabdf4fc4ac1d63326cd7ce2dee5db43249d251f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hydronicinnovations.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/CloudFlareIncRSACA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/CloudFlareIncRSACA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/CloudFlareIncRSACA-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000a4da85fe72eb430f2e8c873629e0aa20367003ab1d4403c861707c9e97424e42bde127045fac4816d7005e4ff68268a5e82d22f21c62dddd182bbc5d7fdb3b45df7aedc8aa216ebf80e263c11e2f7b05415d99593143221e2235535eda3c230bfc63b5a9a69c6119bf864e7fd5dbc7c40968cfa8160aba99ebb237b17ccfa7a246b8359710c0efc6a73667e240c86e7aa6b39e98f10ec5f5e0ac5927899b52b227bcd33ee66ac84ed912f70a7f958ccb0127be7739aeb1490f6be9f5731ccf3a63547bc08adc993c862c1f8498e2f2dd2f25445751d61e6858a0298b3a808157f5ac5d00bddf494d0d037990381b8ff340683bc1c08fe0c908673e4d7526b3d