lsrp.siegfried.ch

- Siegfried AG -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 03:84:25:dc:86:d8:86:d1:8e:c5:f3:9b:2b:1c:68:c5 was issued on by DigiCert Inc.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Siegfried AG

Organization: Siegfried AG
State / Province: Aargau
Locality: Zofingen
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:84:25:dc:86:d8:86:d1:8e:c5:f3:9b:2b:1c:68:c5
Serial Number (int): 4673835093765189071500515144443390149
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: f2:6f:43:49:18:b0:0b:1a:81:c8:0a:18:c3:c5:9b:e1:36:4f:8d:a0
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 02:3b:7f:79:1c:3b:fd:84:32:02:0d:87:2a:52:e9:4f:cc:55:f8:67
Fingerprint (sha256): 21:bd:ff:55:1c:60:12:e3:bc:98:7b:ff:ea:52:5e:f9:2c:95:03:11:31:7c:87:23:c0:18:5a:c3:e7:ac:e6:8e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate lsrp.siegfried.ch

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lsrp.siegfried.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lsrp.siegfried.ch
lyncdiscover.siegfried-amp.com
meet.siegfried-amp.com
lyncdiscover.siegfried-usa.com
meet.siegfried-usa.com
meet.siegfried.eu
lyncdiscover.siegfried.eu
meet.siegfried.cn
lyncdiscover.siegfried.cn
lyncdiscover.siegfried-malta.com
meet.siegfried-malta.com
dialin.siegfried.ch
lyncdiscover.siegfried.ch
meet.siegfried.ch

Other certificates including the domain name siegfried.ch

(limited to 100 certificates)
media.siegfried.ch
siegfried.ch
report.siegfried.ch
siegfried.ch
media.siegfried.ch
siegfried.ch
rdweb-hm.siegfried.ch
media.siegfried.ch
siegfried.ch
mobile.siegfried.ch
report.siegfried.ch
siegfried.ch
siegfried.ch
crmt.siegfried.ch
sip.siegfried.ch
report.siegfried.ch
report.siegfried.ch
www.siegfried.ch
media.siegfried.ch
lsrp.siegfried.ch
mail.siegfried.ch
mobile.siegfried.ch
140years.siegfried.ch
siegfried.ch
mobile-de.siegfried.ch
report.siegfried.ch
media.siegfried.ch
lsrp.siegfried.ch
siegfried.ch
lsrp.siegfried.ch
*.siegfried.ch
140years.siegfried.ch
siegfried.10.poi.ch
sip.siegfried.ch
report.siegfried.ch
report.siegfried.ch
report.siegfried.ch
reports.siegfried.poi.ch
vaultserver1.siegfried.ch
webmail.siegfried.ch
crm.siegfried.ch
siegfried.ch
media.siegfried.ch
mobile-de.siegfried.ch
ir.siegfried.ch
mobile.siegfried.ch
siegfried.ch
siegfried.ch
report.siegfried.ch
siegfried.ch
siegfried.ch
report.siegfried.ch
siegfried.ch
mobile-de.siegfried.ch
siegfried.ch
mail.siegfried.ch
report.siegfried.ch
collaboration.siegfried-hameln.de
siegfried.ch
siegfried.ch
siegfried.ch
mobile-de.siegfried.ch
media.siegfried.ch
siegfried.ch
mail.siegfried.ch
media.siegfried.ch
siegfried.ch
report.siegfried.ch
owa.siegfried.ch
hymt.siegfried.ch
siegfried.ch
lsrp.siegfried.ch
siegfried.ch
siegfried.ch
vpn-mn.siegfried.ch
siegfried.ch
siegfried.ch
lsrp.siegfried.ch
lsrp.siegfried.ch
webapp.siegfried.ch
sip.siegfried.ch
vaultserver1.siegfried.ch
140jahre.siegfried.ch
crm.siegfried.ch
lsrp.siegfried.ch
siegfried.ch
report.siegfried.ch
140years.siegfried.ch
siegfried.ch
report.siegfried.ch
150years.siegfried.ch
siegfried.ch
siegfried.ch
siegfried.ch
siegfried.ch
siegfried.ch
140years.siegfried.ch
siegfried.ch
media.siegfried.ch
report.siegfried.ch

Certificate

The complete raw certificate details for lsrp.siegfried.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9l2o+OdV9XsLVrNDTnS
c1atYr9XJ16SMEozjiQFlX8cnu3fRJYcNSEsQJ3HIjxAhHzSY8zMl95fauCU0lIE
NJF+CITuZ5/zyqvM46Rv2wJtbF6g3MMOWF84SOZzPtFqGGdWA3FtC+XrRkZVoLu5
gl4m2rndoY5+5DTTIFvUVNLNXTHARnp9uX2MefWetHbrn/l/rZZJ/7by3IPvIUK5
TNoGDivcAZTyNR4HGWeciF+PUYKGMYpan/13sG/WatimcfKmsUF2cdCQ/NaklvKG
28BO86Vf0Cm9xMLp0AcM8QxApg2nZgqfRxwE85EsjYYnZHf/5dYqU5XNDvd68tbg
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4673835093765189071500515144443390149
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aargau'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zofingen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Siegfried AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lsrp.siegfried.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19169219267986995621577650247130092621467261769300645621061883780863598421795695441335415003004820497483611829263400494366675278696121225717744628517803999636830687789021344598235164563956395077945245713692724611345471055859916751045443608123301314906245589982459205949571605885942377793365606089092467044548076858926629636993092993779798641167836569201458567243023872501831906293426695929235248405560444199402622372670004373234802232130200781023287113529046928177296823519546481630138760184826692383449283140108134598047816351940909034810432085487338836618295947174983967840272022878836344321044817203363110205186051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f26f434918b00b1a81c80a18c3c59be1364f8da0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (354 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsrp.siegfried.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.siegfried-amp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.siegfried-amp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.siegfried-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.siegfried-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.siegfried.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.siegfried.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.siegfried.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.siegfried.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.siegfried-malta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.siegfried-malta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.siegfried.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.siegfried.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.siegfried.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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