roche.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:33:9f:b1:58:9e:3c:c7:e7:91:3c:f4:2a:1b:72:9a:48:75 was issued on by Let's Encrypt.

With 36 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=roche.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:33:9f:b1:58:9e:3c:c7:e7:91:3c:f4:2a:1b:72:9a:48:75
Serial Number (int): 278903526593511269433759732984930220263541
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 89:e1:fb:2e:da:3a:92:38:2a:c1:5f:c6:8a:ff:11:55:32:0e:dc:03
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 30:97:18:01:7e:5f:3e:e1:8b:f0:03:4e:9b:86:99:c3:4a:9e:12:4a
Fingerprint (sha256): 3c:1b:69:df:f6:3f:dd:af:aa:e2:20:5d:65:5f:ba:c2:55:09:04:45:1e:45:a1:dd:bc:75:81:7a:9f:3b:e4:ee

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate roche.no

36

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for roche.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

forpatients.roche.co.za
foundationmedicine-cac.com
foundationmedicine.bg
foundationmedicine.com.au
foundationmedicine.dk
foundationmedicine.lv
latamrochepressday.com
nimblegen.com
roche-cac.com
roche-diagnostics.fr
roche.at
roche.ba
roche.bg
roche.by
roche.co.id
roche.co.uk
roche.co.za
roche.com.bd
roche.com.mx
roche.com.pe
roche.com.uy
roche.ee
roche.es
roche.ge
roche.ie
roche.it
roche.lt
roche.mk
roche.no
roche.pl
roche.ro
roche.si
roche.ua
rocheinteract.com.au
rochepharmaprocurement.com
tiempodevivir.com.co

Other certificates including the domain name roche.no

(limited to 100 certificates)
cert2.roche.com
cert2.roche.com
sni.cloudflaressl.com
roche.no
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
sni.cloudflaressl.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
roche.no
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
sni.cloudflaressl.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
roche.no
cert2.roche.com
cert2.roche.com
sni.cloudflaressl.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
gazyva.com.au
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
sni.cloudflaressl.com
gazyva.com.au
roche.no
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
gazyva.com.au

Certificate

The complete raw certificate details for roche.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAq/nGjJCwtox4+I4ijlEj
EqYYyed+5TTcphkgx/FOeXLyi8yubLBHT5+oJif4vn1IlkP75NKztnNYfN1MyRC9
xphTn5sBfDZHz107UzDqeI+n7bABsgbngjkJDY8saIyP9Ey6CPYm307QRA38IT9a
Pm8JMq4yWRlACnl6z7KQtlq3y0jd/09xj6bQ3U2cNcHbMZ73TS8ZEibTndkOrd09
oLRnLhfn2eMLaDsYIey0wC6t5cegILrM3MH8jjOPj+3oShhDah2KMl/h2my8ky8P
6Wm45/dHxwvfuXWkuYMLd3G1Vkb/PB61+ElDtcK3UZ2CzzdwXjXMXryNAP86gDSq
GVwx13owZATLIxYj+e+BSpP1LrDhagrVuDYKVIJmsHyDhrzvu23l/M27KYswpuZR
y3uqYC4AxRzllyk3inxkjo6Z+/lwMEfhQSrEK4iRicERtGUQWs8Jiu6lSvk4o2+o
GEZYvHN36m9HMi7VcsysDaWUSQavnMGtb6qCa72WXYbilG4RjHQadgV4/SuwNmvy
bUKRAmReRA+esuKV0VLqyxaRHmfusoFZZ6ZyLq2Fj0Zm6J15xctcbh6jJglvnd/R
W6urraoUlWIlDwKpYWtKpqWnYMrb5TlwpiZZbLl0sTDTARyWBCFpikdgY3qHynuO
VAJfiRtw7y78aPIMVdvQKQ8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278903526593511269433759732984930220263541
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-02 07:22:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-01 07:22:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'roche.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 701599586697416519621974766232072453138048551377236800623396575165376164945164176456294213396025652143804129028542610852207805540863103105266164733083076676644471965137015161024967098171797068103572215094332646850311138517239253906917135933281170318118725878177315718638394851337500937705622200930984309168396847730582708230121750476433113408214563044857373379910714107439548790339439041888258594223297229224496421633060082714245747341588841300075064689482942396029655099576170815519525774816531046811219395921975855733714744692661087915346755528895199488634822147248711656735930555637317808001384209041096769507986920341144349631136237727852365360488123452923984338509036543445937380477549166822459013312487952695960368271810413954741726584347813060954421709281404594282043382401887411546820040044655308306532862183890188839304935352928197992901915971994726149200499677777740395179852781794179590217211045525456763308916636677006551635529630101215824145751459196952664776028977446407860901240262579816666185981486025420276057813215591593544062303191267004614666882903624464036595259212561058955066461336078239532168332265332510823477849989420396890961245192837440701679426779420049506426809151925378202845540129430474388318859569423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89e1fb2eda3a92382ac15fc68aff1155320edc03
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (556 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forpatients.roche.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine-cac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latamrochepressday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimblegen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-cac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-diagnostics.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.by'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheinteract.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochepharmaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiempodevivir.com.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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