git.frey-raum.net

- frey-raum e.k. -

Issued by StartCom Class 4 EV Server CA

About this certificate

This digital certificate with serial number 1f:61:0f:95:1b:09:6f:35:e5:90:28:cf:2e:24:05:44 was issued on by StartCom Ltd..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

frey-raum e.k.

Company registration number: HRA705186
Organization: frey-raum e.k.
Address: Fabrikstrasse 5
Postal code: 76185
State / Province: Baden-Wuerttemberg
Locality: Karlsruhe
Country: DE

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:61:0f:95:1b:09:6f:35:e5:90:28:cf:2e:24:05:44
Serial Number (int): 41710036714118040514879786916438607172
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: f1:9d:82:7d:38:3a:af:78:5c:d1:5a:37:21:7f:dd:83:30:00:da:f8
AuthorityKeyId: 0e:d8:0d:d2:66:1d:ab:72:b6:89:65:4b:64:3d:7e:18:27:d4:8c:de

Fingerprint (sha1): 05:88:cf:b1:38:a8:ca:d2:a5:41:73:bf:f7:b2:da:21:c1:1e:38:44
Fingerprint (sha256): 25:0f:f1:7d:45:1d:cd:26:3c:ce:92:6c:7c:08:84:7f:7f:fc:e1:08:76:6c:1f:ce:52:4a:f0:99:06:5b:20:8b

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server4.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server4.crl

Check the revocation status for certificate git.frey-raum.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for git.frey-raum.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

git.frey-raum.net

Other certificates including the domain name frey-raum.net

(limited to 100 certificates)
dev2.frey-raum.net
chat.frey-raum.net
www.frey-raum.net
*.frey-raum.net
mail.frey-raum.net
conf.frey-raum.net
git.frey-raum.net
www.frey-raum.net
frey-raum.net
chat.frey-raum.net
www.frey-raum.net
chat.frey-raum.net
jira.frey-raum.net
bitbucket.frey-raum.net
mail.frey-raum.net
conf.frey-raum.net
conf.frey-raum.net
chat.frey-raum.net
vpn.frey-raum.net
www.frey-raum.net
*.frey-raum.net
crm.frey-raum.net
jira.frey-raum.net
mail.frey-raum.net
vpn.frey-raum.net
cloud.frey-raum.net
dev2.frey-raum.net
www.frey-raum.net
conf.frey-raum.net
jira.frey-raum.net
mail.frey-raum.net
www.frey-raum.net
dev2.frey-raum.net
dev2.frey-raum.net
www.frey-raum.net
dev2.frey-raum.net
www.frey-raum.net
dev2.frey-raum.net
mail.frey-raum.net
dev2.frey-raum.net
frey-raum.net
www.frey-raum.net
www.frey-raum.net
mail.frey-raum.net
frey-raum.net
frey-raum.net
frey-raum.net
mail.frey-raum.net
conf.frey-raum.net
www.frey-raum.net
www.frey-raum.net
frey-raum.net
www.frey-raum.net
secure.frey-raum.net
chat.frey-raum.net
mail.frey-raum.net
frey-raum.net
chat.frey-raum.net
crm.frey-raum.net

Certificate

The complete raw certificate details for git.frey-raum.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 41710036714118040514879786916438607172
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 4 EV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-06 10:50:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-06 10:50:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA705186'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '76185'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fabrikstrasse 5'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'frey-raum e.k.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'git.frey-raum.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 805576379432556688957818407635856027887431024204675501163042772938288804606639214033366367774987053962031408501368836352229660424465989182337336148134984199943107405457667635751480675458566435322445370937779369995193630910872195205349039169883396625482250332480457106082946809908425413177186024703454498374362006918135079357687288963496860597005692444905618493602034587147603218445825316591678773086254820905733568370585255837519170601957875346299060098289350357247923363542669869736563955359004217501168715668438150502440079108685221924398320373785561814725846292074051531629515886812092378287648730128867632271743464116695333052228594932996427696330962976321685431557400528453378601101771539031775749232854995794029022998910602162471054095214915438842464793280615444972611754098835838456253176028501063097634190651292982396402966088155860326315000963943291318226935910921734335118612738720492781749160929564873295888134988188320616699368888332948990092433852507804057379081211646872743828508977564516211958395077597161005264511546820823101363118389012390781595899905006369442356441746819910451692954830451064125060830234726623919836635384083139300512436381934123641850117047886431061675257979312191137525625742968426154319176734009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f19d827d383aaf785cd15a37217fdd833000daf8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0ed80dd2661dab72b689654b643d7e1827d48cde
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.frey-raum.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.1.1 (StartCom EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003ec7e91ab257c9d999f304fffec28dc44f75ba7eea0e8b7908c5720ac1b7f270729b5c4da4c7ea9727e8d4b8a7f87c286be7cf786bf7c9bed21718bd774e9d95ad5bf40cb21f49a0321198ee4dbcd537c569d154421e8c66380a137d146e3752c55712bd5e40929b17370e2eb8c8247e0b1c1bdf0640f0dbdf9d3eed0ec0decd06202f31eb64a0e41c3f529b1b65ed8a9a21e0ddcdcf9324422e2c943931da9461c52efbecc1997fd1c0665c214fedcd0efdab5e5688799dace67ddb5df763c1ae76fb39b580df33c0db72694e3dd6db6b657d493953891ae270a0eb64897253b876b42d1f3d3c577b59744c9b7563a5ea93ac22cca2adf222f06cae89b8dde9