srv641.tudelft.net

- Technische Universiteit Delft -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0f:1d:3e:d9:68:0b:14:97:ad:a4:cf:a9:2c:4a:21:41 was issued on by TERENA.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Technische Universiteit Delft

Organization: Technische Universiteit Delft
Organization unit: SSC-ICT
Locality: Delft
Country: NL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:1d:3e:d9:68:0b:14:97:ad:a4:cf:a9:2c:4a:21:41
Serial Number (int): 20090271279777776544448047407956631873
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: fb:e9:db:e6:51:dd:23:86:12:d8:d7:16:b3:0e:2c:ec:15:3b:7b:3b
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): ea:5d:b0:2b:fe:04:df:3b:c1:91:3d:c9:b8:be:af:59:76:b1:7a:95
Fingerprint (sha256): 2c:aa:0d:43:80:eb:1b:50:50:5c:dc:27:6c:45:bc:82:83:bb:cd:df:90:fc:f1:8f:ea:a3:3b:fb:ff:e4:ea:ae

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate srv641.tudelft.net

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for srv641.tudelft.net

Public Key Algorithm

RSA

Key Size

8192

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

srv641.tudelft.net
evasys.tudelft.nl
evasystest.tudelft.nl

Other certificates including the domain name tudelft.net

(limited to 100 certificates)
tcs-fmvg.tudelft.net
srv662.tudelft.net
svm100_scl01_vmware.tudelft.net
srv775-2.tudelft.net
filr.tudelft.nl
srv270.tudelft.net
epm.tudelft.nl
xrx-tud-ysft-08.tudelft.net
srv775-1.tudelft.net
bo4.tudelft.nl
weblogin.tudelft.nl
tirana.ws.tudelft.net
svm117-vmware-bulk.tudelft.net
ncsv.tudelft.nl
confhost.dunet.tudelft.net
srv775-1.tudelft.net
webprint.tudelft.nl
collegerama-vs-stream-v6.tudelft.net
fsecure.tudelft.net
wfa.tudelft.nl
srv901.tudelft.net
srv100.tudelft.net
vips.tudelft.nl
srv775-2.tudelft.net
srv275.tudelft.net
vipstst.tudelft.nl
srv831.tudelft.net
apple-software-acc.tudelft.net
evasystest.tudelft.nl
srv989.tudelft.net
portal-test.tudelft.nl
srv059.tudelft.net
iviewer.tudelft.nl
anywhere365pool2.tudelft.net
srv092.tudelft.net
assist.tudelft.nl
sip01.tudelft.nl
iviewer.tudelft.nl
amidala.ws.tudelft.net
tcs-citg.tudelft.net
srv534.tudelft.net
oob.tudelft.net
monitoring.tudelft.nl
srv874.tudelft.net
skypefepool.tudelft.net
intranet.dcsc.tudelft.nl
s4bpool01.tudelft.net
anywhere365.tudelft.net
srv134.tudelft.net
srv775-2.tudelft.net
wac.tudelft.nl
webloginapps.tudelft.nl
turfsysteem.tudelft.net
srv610.tudelft.net
ns1.dunet.tudelft.net
srv641.tudelft.net
vsm9.tudelft.nl
wsus.tudelft.nl
nagios.cre.tudelft.net
printportal.tudelft.nl
basware.tudelft.nl
vips.tudelft.nl
S4Bedgepool02.tudelft.net
srv609.tudelft.net
clientbackup.tudelft.net
svm902-bu-file.tudelft.net
lyncpool02.tudelft.net
svm101-vcloud.tudelft.net
srv901.tudelft.net
srv775-3.tudelft.net
lyncpool02.tudelft.net
evasys.tudelft.nl
tableau-acc.tudelft.nl
srv661.tudelft.net
srv507.tudelft.net
smt.tudelft.net
collegerama-vs-accept.tudelft.net
srv101.tudelft.net
svm108-exchange.tudelft.net
webmail.tudelft.nl
sfbfepool.tudelft.net
svm903-bu-servers.tudelft.net
assist.tudelft.nl
srv607.tudelft.net
srv775-3.tudelft.net
anywhere365pool2.tudelft.net
srv527.tudelft.net
mbam-test.tudelft.net
mfa.tudelft.nl
S4Bedgpool01.tudelft.net
apple-software.tudelft.net
scl04-mgt.tudelft.net
srv076.tudelft.net
lyncpool02.tudelft.net
mysites.tudelft.nl
sps-pool-2013-1.tudelft.net
lyncpool02.tudelft.net
tableau-acc.tudelft.nl
svm109-databases.tudelft.net
srv101.tudelft.net

Certificate

The complete raw certificate details for srv641.tudelft.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20090271279777776544448047407956631873
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technische Universiteit Delft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SSC-ICT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'srv641.tudelft.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (8304 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 879512740420604066945541850039777807264407951953335523636706844305010868869692014740611747756870876262367935395403433912826982969003369775505523206115092054766517245081121828275426825419604435722872725808318118610018533457077143929836524286206556103089556909706379375906087088835041746900552933248197765171520469133819171480256303567040656756088314009568631367943182441814876254801921348434878281343553096388109625497915649112035421746552104086430983318701321387525992961403779068963198045958421282482324881709015472307865745479390497240137895566015458248091385788308556320453015959250273970859841696770373024717509395253730967605272757189677829573441500929424217552484609689545828014019600576061176565104172068059423718720759173052039129698760780446617581861860285569777429177391700423502356836609907503193604872589859848114075491942353092234201004069444920432144584250334159781469373945778059117991722785748351319974781693693940567406242150956608044845218166113354018101131316354802124584231897372520082561632907423931876966022080930921453935054087099067576337813251341948151470480085664192154332888316201542709612756580252553416133123038112552802898106874103328063364721321484440155718366318145680571227271269524467071217660411487095090102718912052739003347232433875305736822965732644995846434906718822632863623846525709517122108503045025523677298606326178486364955709851947156603639876616716294321966643177393234792127005175834127039276940340017453825655881866863987743403846120591983476089138714549494830347823283937633553477923401087201671103773347974660647189003747105216486978461231031431057519221734617260280539650470415190686598536404136095957564522079923245400066867777591280566596787716528664971985023535904817547188542619250849822537232604048638044068482507779392323937488485762227055343721706978901037486548479892414192457351684970305664372707578641285954277986507020770181147911520466165797705962928067398028592085608727456951077525676006650731170373266051557403111316454770731444896335235208662036341452571884455093653846081041447228930793583452515752040723814064094431808486115634582609145609740023172693361984628984468259561636007450524690481288966824909780081899971547505882229654040081937395288820415725704046022313667241366979012836369735864898068546917149046458142063146286348668711653409792904246490542153013571395024569780515972975578651843854229282059933741126563369664410278141369256111167593348544613469266294697249437689880530178025991187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fbe9dbe651dd238612d8d716b30e2cec153b7b3b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srv641.tudelft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evasys.tudelft.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evasystest.tudelft.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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