vpnma.gruppofondiariasai.it

- UnipolSai Assicurazioni S.p.A -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 08:d1:17:e8:ee:e6:dc:2b:68:db:15:36:cd:fc:5f:97 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UnipolSai Assicurazioni S.p.A

Organization: UnipolSai Assicurazioni S.p.A
Organization unit: CED
State / Province: Bologna
Locality: Bologna
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:d1:17:e8:ee:e6:dc:2b:68:db:15:36:cd:fc:5f:97
Serial Number (int): 11719498960004218252722776387136282519
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4a:8d:82:f7:8f:3f:54:9c:20:35:d4:a3:92:45:af:e4:60:f4:89:52
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): ed:eb:06:e7:2e:8d:e0:c4:16:33:d1:42:e8:8d:2e:42:1f:0f:3d:4a
Fingerprint (sha256): 2f:8e:72:ba:53:46:fe:60:7b:fc:5f:a4:f2:f6:32:22:03:ef:58:a2:38:0c:48:05:ae:ea:5c:e8:22:98:1e:e8

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate vpnma.gruppofondiariasai.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpnma.gruppofondiariasai.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpnma.gruppofondiariasai.it

Other certificates including the domain name gruppofondiariasai.it

(limited to 100 certificates)
sistemisanitari.gruppofondiariasai.it
finitaliaspa.gruppofondiariasai.it
previdenzacomplementare.gruppofondiariasai.it
previdenzacomplementare.gruppofondiariasai.it
systemalite.gruppofondiariasai.it
webmail.gruppofondiariasai.it
preventivazionerc.gruppofondiariasai.it
utentiprevibank.gruppofondiariasai.it
systemalite.gruppofondiariasai.it
systemalite.gruppofondiariasai.it
dialogocl.gruppofondiariasai.it
attestatiexdipendenti.gruppofondiariasai.it
previdenzacomplementare.gruppofondiariasai.it
previdenzacomplementare.gruppofondiariasai.it
eco.gruppofondiariasai.it
portalecollaboratori.gruppofondiariasai.it
eco.gruppofondiariasai.it
portalecollaboratori.gruppofondiariasai.it
systemalite.gruppofondiariasai.it
servizi.gruppofondiariasai.it
dts.gruppofondiariasai.it
utentiprevibank.gruppofondiariasai.it
brokdoc.gruppofondiariasai.it
brokdoc.gruppofondiariasai.it
eco.gruppofondiariasai.it
portalecollaboratori.gruppofondiariasai.it
serviziweb.gruppofondiariasai.it
utentiprevibank.gruppofondiariasai.it
eco.gruppofondiariasai.it
ies.gruppofondiariasai.it
servizi.gruppofondiariasai.it
eco.gruppofondiariasai.it
previdenzacomplementare.gruppofondiariasai.it
utentiprevibank.gruppofondiariasai.it
vpnma.gruppofondiariasai.it
preventivazionerc.gruppofondiariasai.it
vpnma.gruppofondiariasai.it
servizi.gruppofondiariasai.it
vpnbo.gruppofondiariasai.it
preventivazionerc.gruppofondiariasai.it
servizionline.gruppofondiariasai.it
finitaliaspa.gruppofondiariasai.it
finitaliaspa.gruppofondiariasai.it
servizi.gruppofondiariasai.it
preventivazionerc.gruppofondiariasai.it
firmadigitale.gruppofondiariasai.it
brokdoc.gruppofondiariasai.it
webmail.gruppofondiariasai.it
vpnma.gruppofondiariasai.it
attestatiexdipendenti.gruppofondiariasai.it
attestatiexdipendenti.gruppofondiariasai.it
servizi.gruppofondiariasai.it
utentiprevibank.gruppofondiariasai.it
firmadigitale.gruppofondiariasai.it
attestatiexdipendenti.gruppofondiariasai.it
utentiprevibank.gruppofondiariasai.it
dialogocl.gruppofondiariasai.it
vpnma.gruppofondiariasai.it
serviziweb.gruppofondiariasai.it
dialogoit.gruppofondiariasai.it
attestatiexdipendenti.gruppofondiariasai.it
servizi.gruppofondiariasai.it
eco.gruppofondiariasai.it
brokdoc.gruppofondiariasai.it
attestatiexdipendenti.gruppofondiariasai.it
eco.gruppofondiariasai.it
finitaliaspa.gruppofondiariasai.it
previdenzacomplementare.gruppofondiariasai.it
preventivazionerc.gruppofondiariasai.it
preventivazionerc.gruppofondiariasai.it
attestatiexdipendenti.gruppofondiariasai.it
previdenzacomplementare.gruppofondiariasai.it
ies.gruppofondiariasai.it
dialogoit.gruppofondiariasai.it
servizi.gruppofondiariasai.it
portalecollaboratori.gruppofondiariasai.it
serviziweb.gruppofondiariasai.it
utentiprevibank.gruppofondiariasai.it
webmail.gruppofondiariasai.it
servizi.gruppofondiariasai.it
firmadigitale.gruppofondiariasai.it
dialogoit.gruppofondiariasai.it
ies.gruppofondiariasai.it
webmail.gruppofondiariasai.it
*.gruppofondiariasai.it
webmail.gruppofondiariasai.it
previdenzacomplementare.gruppofondiariasai.it
serviziweb.gruppofondiariasai.it
attestatiexdipendenti.gruppofondiariasai.it
preventivazionerc.gruppofondiariasai.it
previdenzacomplementare.gruppofondiariasai.it
eco.gruppofondiariasai.it
portalecollaboratori.gruppofondiariasai.it
previdenzacomplementare.gruppofondiariasai.it
brokdoc.gruppofondiariasai.it
attestatiexdipendenti.gruppofondiariasai.it
attestatiexdipendenti.gruppofondiariasai.it
serviziweb.gruppofondiariasai.it
vpnma.gruppofondiariasai.it
portalecollaboratori.gruppofondiariasai.it

Certificate

The complete raw certificate details for vpnma.gruppofondiariasai.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FEWLwm3Yjygpgyj6/Ib
Omj/lW5RUdipj5lcblWQUQ50zx8qVhaDk8KebXfaEWCeGDkPONYxZMthBh2WUH/3
claC7gslWV0dFkzgHkRYwv+r6h/yoX0aS66xqRsi0CkVPz8bEUdvfKxHHTf1RScj
bxbeo6kbKsbXLzPhovBEetXd0tz+dfpxieokVNz8uFX5mRV8Yg3UjKmlKK+r2IkC
VX/zm0kOB5QEhV3XVYhsGTZKuRl5k+fo4f5/B8Twhvu9E1PdLyYtysUW1bFWCObZ
1/T6q1PgjP8SizcRiZ8Md5qeHlF+39PfDhskHOOsYG1VvQAI8hXcx3HWta4AHa5r
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11719498960004218252722776387136282519
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bologna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bologna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UnipolSai Assicurazioni S.p.A'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpnma.gruppofondiariasai.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29327272072098825630015666817443838948245370664947264055877844999496867106809841746184201759014752232304363042283447328999791457748606292302403084716425811948705443522667642214308604160277559485089089591919651879403409605942949909422012972927952891225316165966685580674799710942340001386804739915194386611254449743171951788375134305600429882101047150320694085915663334720900896192196368380034469442989389115192217067085529019204199457385298402287252277320585866144240253537686549518045460440320957414281564172734157112889014156405910282256979903572893387213669774125649536028267319825037575027008689046933655927024411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a8d82f78f3f549c2035d4a39245afe460f48952
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpnma.gruppofondiariasai.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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