gateprep1.dsi.universite-paris-saclay.fr

- UNIVERSITE PARIS-SACLAY -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0a:24:45:be:9f:d5:75:a4:2a:e7:79:86:ba:59:c4:00 was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UNIVERSITE PARIS-SACLAY

Organization: UNIVERSITE PARIS-SACLAY
Locality: Saint-Aubin
Country: FR

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:24:45:be:9f:d5:75:a4:2a:e7:79:86:ba:59:c4:00
Serial Number (int): 13480617233836115505556442671425897472
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7f:ae:9a:81:86:6e:fa:da:c2:02:98:31:54:0a:35:c2:69:73:fa:c3
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): e1:54:18:44:d2:5f:61:c7:4c:5b:e0:9b:6a:b4:57:67:39:0f:42:c3
Fingerprint (sha256): 26:5c:a1:2b:2e:91:2c:b4:57:26:c6:28:22:b5:ac:ab:5c:de:f5:31:8e:ee:38:c5:ad:6c:fc:84:58:c6:fe:08

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate gateprep1.dsi.universite-paris-saclay.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gateprep1.dsi.universite-paris-saclay.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gateprep1.dsi.universite-paris-saclay.fr
www.gateprep1.dsi.universite-paris-saclay.fr

Other certificates including the domain name universite-paris-saclay.fr

(limited to 100 certificates)
bbb.imo.universite-paris-saclay.fr
lims.c2n.universite-paris-saclay.fr
apo-wsprofiltest.dsi.universite-paris-saclay.fr
sports.universite-paris-saclay.fr
video.dsi.universite-paris-saclay.fr
connecteursprep.dsi.universite-paris-saclay.fr
apowebtest.dsi.universite-paris-saclay.fr
atlas.universite-paris-saclay.fr
hebergement.universite-paris-saclay.fr
piatest.dsi.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
envues.universite-paris-saclay.fr
www.agora.universite-paris-saclay.fr
gitlab.dsi.universite-paris-saclay.fr
web-bib.imo.universite-paris-saclay.fr
snwtest.dsi.universite-paris-saclay.fr
inception.universite-paris-saclay.fr
envues.universite-paris-saclay.fr
www.photo-club.asso.universite-paris-saclay.fr
www.c2n.universite-paris-saclay.fr
www.ese.universite-paris-saclay.fr
www2.lpgp.universite-paris-saclay.fr
gate.universite-paris-saclay.fr
www-test.c2n.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
ecandidatprep.dsi.universite-paris-saclay.fr
www.bibliotheques.universite-paris-saclay.fr
rh.c2n.universite-paris-saclay.fr
www.polytech.universite-paris-saclay.fr
www.dpo.universite-paris-saclay.fr
www.faculte-sciences-sport.universite-paris-saclay.fr
lmodb.imo.universite-paris-saclay.fr
*.universite-paris-saclay.fr
awacstest.dsi.universite-paris-saclay.fr
pacestest.dsi.universite-paris-saclay.fr
ipa-user.universite-paris-saclay.fr
edith-cms.c2n.universite-paris-saclay.fr
iaprimotest.dsi.universite-paris-saclay.fr
omeka.universite-paris-saclay.fr
annuaire-ladiagonaletest.dsi.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
www.ifsbm.universite-paris-saclay.fr
www.imo.universite-paris-saclay.fr
omeka.universite-paris-saclay.fr
www.sciences-sif.universite-paris-saclay.fr
resa.imo.universite-paris-saclay.fr
www.licence-pro-technico-commercial-cachan.u-psud.fr
bibliolabs.universite-paris-saclay.fr
envues.universite-paris-saclay.fr
idp.universite-paris-saclay.fr
www.dep-chimie.universite-paris-saclay.fr
sso.universite-paris-saclay.fr
edith-cms.c2n.universite-paris-saclay.fr
pia.dsi.universite-paris-saclay.fr
sihamperso.universite-paris-saclay.fr
adonis-api.universite-paris-saclay.fr
www.c2n.universite-paris-saclay.fr
www.persay.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
Athena.universite-paris-saclay.fr
sihampersoform.dsi.universite-paris-saclay.fr
www.collecsciences.universite-paris-saclay.fr
www.cesfo.universite-paris-saclay.fr
*.portailtest.universite-paris-saclay.fr
ecandidattest-gestionnaire.dsi.universite-paris-saclay.fr
sportstest.dsi.universite-paris-saclay.fr
www.apoil.asso.universite-paris-saclay.fr
bdd.c2n.universite-paris-saclay.fr
idp.universite-paris-saclay.fr
mahery2.imo.universite-paris-saclay.fr
re7-extranet.universite-paris-saclay.fr
bernardotest.dsi.universite-paris-saclay.fr
edith-www.c2n.universite-paris-saclay.fr
api.focus.universite-paris-saclay.fr
e-missions-dev.imo.universite-paris-saclay.fr
www.ese.universite-paris-saclay.fr
share.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
www.kiosk-lpgp.universite-paris-saclay.fr
gateprep1.dsi.universite-paris-saclay.fr
www.polytech.universite-paris-saclay.fr
www.c2n.universite-paris-saclay.fr
wp.imo.universite-paris-saclay.fr
lims.c2n.universite-paris-saclay.fr
www.c2n.universite-paris-saclay.fr
hermes.universite-paris-saclay.fr
idm1.idm.universite-paris-saclay.fr
bibliotheque.imo.universite-paris-saclay.fr
www.bibliotheques.universite-paris-saclay.fr
hermes.universite-paris-saclay.fr
extranet.universite-paris-saclay.fr
*.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
wims.universite-paris-saclay.fr
www.iut-orsay.universite-paris-saclay.fr
www.universite-paris-saclay.fr
copernic.universite-paris-saclay.fr
weblosco1.dsi.universite-paris-saclay.fr
www.biocis.universite-paris-saclay.fr
pjweb.universite-paris-saclay.fr

Certificate

The complete raw certificate details for gateprep1.dsi.universite-paris-saclay.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13480617233836115505556442671425897472
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-31 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Saint-Aubin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UNIVERSITE PARIS-SACLAY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gateprep1.dsi.universite-paris-saclay.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 675883980125509752536185076592761957057676918744912507042767249134441141335675924390233420922417727393218974827928629170751915293416589209634722457867056991549200620688643052929811564911372311980938193639066477592188643817845885450950442327028006061206493768927093077865858495541746519186952962936883089691344870354553686571763087277211929950844698745930124619604802599405236607740771820898635928232493207021295242602867282255856531449342879515295253123134344177617655320904334190140130092214448564924229493347092691316046438781241613461913659214300663561896162395091144704375224026444061055666130054398208059590649712980653854870601207931073396797088256826549927640539195635236775942079256245586750143142505694510485450374029341566213771823721951203603760147780771714013708100673741754638137865545631988154630834033524606616842940029119521647804048958564397238422584555003353514836578581519043578679833688311346679321035040876320131136100146935681126585617880961510431790907105291481184154448816750975208637068574455557790996563508763588614837048596327041760618180533605877134687919462770045162723605001410344371192011663422643022518158829060311369698120239126073927245659440588711470952362163245827801842106706939230764885565592119
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7fae9a81866efadac2029831540a35c26973fac3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateprep1.dsi.universite-paris-saclay.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gateprep1.dsi.universite-paris-saclay.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007b828f025bf27f0e37b89259130e3fb44a67376842b9905362cf690adec56f01982d2e602ae70be0cd5439a8f281645d41fb532b2f99496d65d1f7651ad69f508ca78b912aa5db6c8ba8c4bae7667e0b7322270658d5cb9f682ece337b28f25d8c177ecf76e607dcee8fb3cf84da7e824646ae2dcb8bc33dc442eb641d219255e3bfa1d66d386bcb094a7988d55d923dd3b5663a1bc775cf765c4f4f765b507b554e14ce470b60d0dfcda227501d6fb6d66c5cc5ac6c2491e95d75355166d2c32c4555d9f184c30a8ba9b119274e68abeb439a1e1f97948798b9635474be1fd8af24025e1a374a8a012e37d513d3b41917244c1cf0ec14f59176c6fcafc91b49