www.lotto-bw.de

- Staatliche Toto-Lotto GmbH -

Issued by thawte Extended Validation SHA256 SSL CA

About this certificate

This digital certificate with serial number 28:63:63:3d:14:49:2f:28:e0:cd:43:f8:6c:be:df:77 was issued on by thawte, Inc..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Staatliche Toto-Lotto GmbH

Company registration number: HRB 917
Organization: Staatliche Toto-Lotto GmbH
Organization unit: IV
State / Province: Baden-Wuerttemberg
Locality: Stuttgart
Country: DE

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 28:63:63:3d:14:49:2f:28:e0:cd:43:f8:6c:be:df:77
Serial Number (int): 53685170018138432223425270826798079863
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 3b:24:c8:31:a0:b7:5a:d0:6a:b8:d2:ca:07:74:cc:1e:24:d4:c4:dc

Fingerprint (sha1): bd:b6:02:16:95:72:ef:93:fe:c6:e4:17:ea:e6:b8:b3:e5:4a:03:77
Fingerprint (sha256): 47:c1:06:30:70:76:6c:06:0b:b2:f4:90:00:ff:e1:24:16:db:c4:48:a2:46:af:b4:5c:a6:f2:83:b7:90:4a:d1

Issuing Certificate URL: http://tf.symcb.com/tf.crt

Revocation information

OCSP Server: http://tf.symcd.com
CRL Distribution Point: http://tf.symcb.com/tf.crl

Check the revocation status for certificate www.lotto-bw.de

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lotto-bw.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

facebook.lotto-bw.de
games.lotto-bw.de
geschaeftsbericht.lotto-bw.de
lotto-bw.de
www.lotto-bw.de

Other certificates including the domain name lotto-bw.de

(limited to 100 certificates)
www.lotto-bw.de
www.veranstaltung.lotto-bw.de
image.client.generali.ro
san-3-s50.tlsprovisioning.exacttarget.com
wunschgewinn.lotto-bw.de
extfs.lotto-bw.de
stl2.lotto-bw.de
image.client.generali.ro
www.lotto-bw.de
san-3-s50.tlsprovisioning.exacttarget.com
stl2.lotto-bw.de
www.lotto-bw.de
stl1.lotto-bw.de
www.veranstaltung.lotto-bw.de
stl2.lotto-bw.de
image.client.generali.ro
www.lotto-bw.de
www.lotto-bw.de
image.client.generali.ro
www.lotto-bw.de
schulung.lotto-bw.de
schulung.lotto-bw.de
www.lotto-bw.de
www.lotto-bw.de
san-3-s50.tlsprovisioning.exacttarget.com
www.veranstaltung.lotto-bw.de
san-3-s50.tlsprovisioning.exacttarget.com
image.client.generali.ro
wunschgewinn.lotto-bw.de
wunschgewinn.lotto-bw.de
image.client.generali.ro
image.client.generali.ro
schulung.lotto-bw.de
www.veranstaltung.lotto-bw.de
www.lotto-bw.de
wunschgewinn.lotto-bw.de
www.lotto-bw.de
stl1.lotto-bw.de
wunschgewinn.lotto-bw.de
dev.marketing.lotto-bw.de
stl2.lotto-bw.de
kmsf2.lotto-bw.de
san-3-s50.tlsprovisioning.exacttarget.com
wunschgewinn.lotto-bw.de
marketing.lotto-bw.de
www.lotto-bw.de
wunschgewinn.lotto-bw.de
www.veranstaltung.lotto-bw.de
www.veranstaltung.lotto-bw.de
www.lotto-bw.de
schulung.lotto-bw.de
www.lotto-bw.de
san-3-s50.tlsprovisioning.exacttarget.com
test.marketing.lotto-bw.de
wunschgewinn.lotto-bw.de
image.client.generali.ro
www.veranstaltung.lotto-bw.de
www.lotto-bw.de
wunschgewinn.lotto-bw.de
stl1.lotto-bw.de
www.lotto-bw.de
wunschgewinn.lotto-bw.de
www.lotto-bw.de
wunschgewinn.lotto-bw.de
image.client.generali.ro
www.veranstaltung.lotto-bw.de
stl2.lotto-bw.de
extfs.lotto-bw.de

Certificate

The complete raw certificate details for www.lotto-bw.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49rTBbhj6Rrr4tXJCr1D
h/in1nqRTW1qRwqLBRwjhy3bAcnVf2DRXykhU9HmKhfBqj9iWD2SV5pdrNjfh72c
sB5uOB9+2lUMYVT8CnWu1SjIyTbCAfvuiWg0S8lBTRg/88lpVgwDjINIEFugjOff
dudqaKMna/3gtRXWac2RAw1PloXCr/9szGlE/G6XmWbSdJQdYIpWwgTUYJ/dVRPz
ZVgDY4iAkh2zmZU9a3AQEH+aNxSMz/DnUJwjlxPBPjL2BUsxzLrRE3mgE/mIBv86
pwTAklHH8rP0qiLPDsXTGKDUE37ZeyJDYww1Fq/2uycnW+Uzb2HiVVglW5dqcjU4
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 53685170018138432223425270826798079863
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte Extended Validation SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Stuttgart'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Staatliche Toto-Lotto  GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Stuttgart'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 917'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.lotto-bw.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28764001514323293897032718222738694373095611710203497129018339297168649354395809248237116526066566202209145194780737860012123005183563737329045893571746452228409177920568459597570668294817567751057019840904738491300313427291792451283420689522479977751036375540976601448557494278875410845504716076867598049247791123957691511301917071825705843734663941033550230793780929725901575306721715834157905419742892225987096770077332440136157102813221092796079832678233213960163609258978539315798640622117700737990699259397497240260454791622510572643449677070032787785409975584913196307093396936242429545759533359065875256522973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facebook.lotto-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'games.lotto-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geschaeftsbericht.lotto-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lotto-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lotto-bw.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tf.symcb.com/tf.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.48.1 (Thawte EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3b24c831a0b75ad06ab8d2ca0774cc1e24d4c4dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tf.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tf.symcb.com/tf.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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