EXPE02.nebrija.es

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 03:51:cd:8c:03:83:ea:0b:fa:25:a3:11:73:25:42:4b was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=EXPE02.nebrija.es

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:51:cd:8c:03:83:ea:0b:fa:25:a3:11:73:25:42:4b
Serial Number (int): 4412429019895498812596283980982338123
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 6e:d8:3c:9e:cd:50:34:35:60:ca:3b:ea:dd:fc:c7:76:7d:07:b6:f0
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 36:75:d7:f3:ee:e7:2c:0c:15:06:a5:e0:7c:f9:81:de:2e:03:63:bc
Fingerprint (sha256): 26:56:6b:5d:c6:04:62:3b:a0:51:7f:91:4a:94:48:9a:a8:88:04:05:df:c7:64:8b:ed:fe:65:10:56:f4:0b:a0

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate EXPE02.nebrija.es

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for EXPE02.nebrija.es

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

EXPE02.nebrija.es
EXPE01.nebrija.es
EXPECL.nebrija.es

Other certificates including the domain name nebrija.es

(limited to 100 certificates)
fs.nebrija.es
campusvirtual.nebrija.es
symposium.events
sistemas.nebrija.es
biblioteca.nebrija.es
symposium.events
www.nebrija.es
desarrollopre3.nebrija.es
symposium.events
portalempleado.nebrija.es
vpn.nebrija.es
www.nebrija.es
pruebasadmision.nebrija.es
symposium.events
biblioteca.nebrija.es
eventos.uam.es
campusvirtual.nebrija.es
www.nebrija.es
vpn.nebrija.es
autodiscover.nebrija.es
www.nebrija.es
actos.nebrija.es
www.nebrija.es
sistemas.nebrija.es
symposium.events
portalpdipas.nebrija.es
BZCCM.rednebrija.nebrija.es
symposium.events
EXPE02.nebrija.es
*.ezproxy.nebrija.es
symposium.events
vpn.nebrija.es
EXPE02.nebrija.es
certbot.symposium.events
blogs.nebrija.es
symposium.events
www.nebrija.es
fs.nebrija.es
campusvirtual.nebrija.es
symposium.events
owa.nebrija.es
campusvirtual.nebrija.es
certbot.symposium.events
biblioteca.nebrija.es
symposium.events
symposium.events
owa.nebrija.es
symposium.events
cursos.nebrija.es
owa.nebrija.es
symposium.events
BZCCM.rednebrija.nebrija.es
vpn.nebrija.es
certbot.symposium.events
symposium.events
certbot.symposium.events
biblioteca.nebrija.es
vpn.nebrija.es
biblioteca.nebrija.es
owa.nebrija.es
portalpdipas.nebrija.es
certbot.symposium.events
EXPE02.nebrija.es
campusvirtual.nebrija.es
symposium.events
fs.nebrija.es
desarrollopre3.nebrija.es
sgd.nebrija.es
www.symposium.events
biblioteca.nebrija.es
campusvirtual.nebrija.es
vpn.nebrija.es
portalpdipas.nebrija.es
symposium.events
portalpdipas.nebrija.es
portalempleado.nebrija.es
sistemas.nebrija.es
nch.nebrija.es
desarrollopre.nebrija.es
owa.nebrija.es
campusvirtual.nebrija.es
symposium.events
symposium.events
vpn.nebrija.es
fs.nebrija.es
www.symposium.events
www.nebrija.es
campusvirtual.nebrija.es
actos.nebrija.es
symposium.events
campusvirtual.nebrija.es
symposium.events
sistemas.nebrija.es
blogs.nebrija.es
portalpdipas.nebrija.es
certbot.symposium.events
*.ezproxy.nebrija.es
vpn.nebrija.es
vdiaulas.nebrija.es
clubalumni.nebrija.es

Certificate

The complete raw certificate details for EXPE02.nebrija.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIQA1HNjAOD6gv6JaMRcyVCSzANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN
MTkwOTE5MDAwMDAwWhcNMjExMTIyMTIwMDAwWjAcMRowGAYDVQQDExFFWFBFMDIu
bmVicmlqYS5lczCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANs9TsOA
Y8M6aRa2FRrXS9nBI+SR9yWQpuBes9tv0mLsr8lA3GaU7ymRiwK26clNHBMa1zPG
TFcyyjYE1HWxldhwSNuyb95SHmLTJr4igQeZxu7vF7Zf6boaoRMVZ2kaCrsnIS/x
BY+vLKL7jHBWsbZ8dKXzFnRdHFWD/yT5rXcw2tHRtQTn34Xzn8EkfmNP2jYQT2hB
gfGzCy4zv3QDbjH7YW2nklI0JWkqvwwWM12gqO8HgPQA6mREmIEx1Fi0wIELGog+
dGcOcSO3Wv4Qf1B9+roySODoWGlEYkvULNjAuuYnD1gLXgEbaHASF3Fn/NN7pnOY
RGtTH4SY7nzbnszkyfRbydom47l3jFW3S4tdPZrvWckqgMj8zclPhoRt8yu0r5ua
E3Hp8rIBHhVPB2rArH9t5po0XSeumeFk3YJb8fTk+BgiNMEdUzPNchWqDVVgSxP4
jukabgGCpunEyXf59vra2/pragNS9Kx2A+BC6WR0kAevu99h3ZZKDc65srv0FoaG
6w3c/e7jDH7sQTlBdHJAIv22eYjryeos7CRl/zj8X8yvRJvBdpFPpm1mQ6slPjyr
B2S8eNpSe7U+rttOY1cdA2m00YJmZKtVBQA3MMP/1rfgpE9En7INOFCGdTKhgXft
fXk9FQMXy5b058Jw6dhs8/JM95Kc/l8Ea+F9AgMBAAGjggHSMIIBzjAfBgNVHSME
GDAWgBSjyF5lVOUweMEF6gcKalnMuf7eWjAdBgNVHQ4EFgQUbtg8ns1QNDVgyjvq
3fzHdn0HtvAwQgYDVR0RBDswOYIRRVhQRTAyLm5lYnJpamEuZXOCEUVYUEUwMS5u
ZWJyaWphLmVzghFFWFBFQ0wubmVicmlqYS5lczAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDoGA1UdHwQzMDEwL6AtoCuGKWh0
dHA6Ly9jZHAudGhhd3RlLmNvbS9UaGF3dGVSU0FDQTIwMTguY3JsMEwGA1UdIARF
MEMwNwYJYIZIAYb9bAECMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2lj
ZXJ0LmNvbS9DUFMwCAYGZ4EMAQIBMG8GCCsGAQUFBwEBBGMwYTAkBggrBgEFBQcw
AYYYaHR0cDovL3N0YXR1cy50aGF3dGUuY29tMDkGCCsGAQUFBzAChi1odHRwOi8v
Y2FjZXJ0cy50aGF3dGUuY29tL1RoYXd0ZVJTQUNBMjAxOC5jcnQwCQYDVR0TBAIw
ADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQFi5qV5
rDY5eKC7Qn/OUf4ihOa7G/pqrghtNkIhAo998DSE3LTCEUm6gA0w9xnMTCpqQdqg
vfkCD8NRbHpZCLbh1sjBv9bGx8CXtyJt0Nt20QcTv2839ZNIv2wUz+4ooBtz63GA
IgDj6iJEVkY4Es8JpNbr72tA4607ILNvUOw5vDh0vj1QReqn1YTQ6VQfzlk8TSGV
Qy51VU9ftpPNYsN+wkeNYI5eQQOQCfTeWcEMbY18xpy4rnFuE/7uDA+jdHWaAtCb
zyN5n03Bnxrx91/UvJsuQZcKcXMc7mVqltxQpKw3wTTmYTuHCfOkzl14Uaf2qu0j
9gDTNg0FBhp6+g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4412429019895498812596283980982338123
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EXPE02.nebrija.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 894419056657168329070695895796071050080724829213174690143032736976208277004210327560670181562432561509079348193374565545620161864335508919780168310553995475841836253272327038912958580130782681579581942158771165833236799508462809914366276216649542804983790510486953288557973408432729362877012376039360522349857173021654959096249358224958020315661771436944536106232208780345295440908846215641964929562847200641802929646867206016453795864004669787536075342822012588326068046270322557764665130315043544216032308063840144263947047983106228098576913460463047856451331022676638941877217289517231836588249844322481898629286404795628735740406426236415954697592362241729622171402264186607673597192079936329112339020493918185265209815868183274317298754859874588881202169148731406410613728469925367128975860741697028059826006503780785796597059771884797239846568212416475723439526998172952008200748459807514042787138060915618650720431922082632490568898676667867292128613408362357231553206094992873178701839425417226033541055779386827970965019692101432663453226389887078596765255863739063579835429520667492659139660683908415058546633393991567430623393372507134499636532832437486598465247142528213823720432779747869688265886906946232028921785475453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ed83c9ecd50343560ca3beaddfcc7767d07b6f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'EXPE02.nebrija.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'EXPE01.nebrija.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'EXPECL.nebrija.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00550162e6a579ac363978a0bb427fce51fe2284e6bb1bfa6aae086d364221028f7df03484dcb4c21149ba800d30f719cc4c2a6a41daa0bdf9020fc3516c7a5908b6e1d6c8c1bfd6c6c7c097b7226dd0db76d10713bf6f37f59348bf6c14cfee28a01b73eb71802200e3ea224456463812cf09a4d6ebef6b40e3ad3b20b36f50ec39bc3874be3d5045eaa7d584d0e9541fce593c4d2195432e75554f5fb693cd62c37ec2478d608e5e41039009f4de59c10c6d8d7cc69cb8ae716e13feee0c0fa374759a02d09bcf23799f4dc19f1af1f75fd4bc9b2e41970a71731cee656a96dc50a4ac37c134e6613b8709f3a4ce5d7851a7f6aaed23f600d3360d05061a7afa