*.hec.invivo-group.com
Issued by RapidSSL RSA CA 2018
About this certificate
This digital certificate with serial number 02:99:b5:87:28:82:49:ff:ea:cd:9b:32:69:f7:b3:7d was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.hec.invivo-group.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:99:b5:87:28:82:49:ff:ea:cd:9b:32:69:f7:b3:7dSerial Number (int): 3456559235402770954001132477516067709
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 50:29:ae:ba:b5:b4:67:a3:b9:b9:fe:b5:f4:85:e1:11:17:10:64:a4
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75
Fingerprint (sha1): 40:01:20:db:95:3a:ec:a4:c9:f6:95:cd:56:86:08:66:65:39:49:8b
Fingerprint (sha256): 4e:e2:88:36:a8:b5:d8:d9:fd:cf:3c:4a:fe:4c:71:74:d0:57:8d:f9:a8:a6:fd:eb:5f:cd:db:e6:db:fc:2e:b0
Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt
Revocation information
OCSP Server: http://status.rapidssl.comCRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl
Check the revocation status for certificate *.hec.invivo-group.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.hec.invivo-group.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.hec.invivo-group.com
Other certificates including the domain name invivo-group.com
(limited to 100 certificates)
neovia-group.com
replication-siane2.invivo-group.com
mail.invivo-group.com
www.gigaservices.invivo-group.com
neovia-group.com
replication-siane.invivo-group.com
*.hec.invivo-group.com
www.gigaservices.invivo-group.com
www.invivo-group.com
planet.invivo-group.com
mail.invivo-group.com
*.hec.invivo-group.com
neovia-group.com
www.invivo-group.com
mail.invivo-group.com
*.invivo-group.com
everywhere.invivo-group.com
everywhere.invivo-group.com
sip.invivo-group.com
inmyfarm.invivo-group.com
planet.invivo-group.com
*.hec.invivo-group.com
neovia-group.com
replication-siane.invivo-group.com
mobility.invivo-group.com
www.invivo-group.com
replication-siane.invivo-group.com
*.invivo-group.com
communautes.invivo-group.com
neovia-group.com
mail.invivo-group.com
planet.invivo-group.com
sip.invivo-group.com
planet.invivo-group.com
replication-siane.invivo-group.com
projets.invivo-group.com
rep-gv.invivo-group.com
communautes.invivo-group.com
inmyfarm.invivo-group.com
*.hec.invivo-group.com
neovia-group.com
*.invivo-group.com
www.invivo-group.com
mobility.invivo-group.com
neovia-group.com
neovia-group.com
*.invivo-group.com
replication-siane4.invivo-group.com
*.invivo-group.com
neovia-group.com
neovia-group.com
www.invivo-group.com
www.invivo-group.com
mail.invivo-group.com
neovia-group.com
replication-siane3.invivo-group.com
everywhere.invivo-group.com
ag2021.invivo-group.com
polposition.invivo-group.com
sip.invivo-group.com
my.planet.invivo-group.com
linedi.invivo-group.com
replication-siane4.invivo-group.com
polposition.invivo-group.com
metiers.invivo-group.com
*.invivo-group.com
*.invivo-group.com
neovia-group.com
*.invivo-group.com
mail.invivo-group.com
mail.invivo-group.com
replication-siane2.invivo-group.com
mail.invivo-group.com
www.gigaservices.invivo-group.com
neovia-group.com
replication-siane.invivo-group.com
*.hec.invivo-group.com
www.gigaservices.invivo-group.com
www.invivo-group.com
planet.invivo-group.com
mail.invivo-group.com
*.hec.invivo-group.com
neovia-group.com
www.invivo-group.com
mail.invivo-group.com
*.invivo-group.com
everywhere.invivo-group.com
everywhere.invivo-group.com
sip.invivo-group.com
inmyfarm.invivo-group.com
planet.invivo-group.com
*.hec.invivo-group.com
neovia-group.com
replication-siane.invivo-group.com
mobility.invivo-group.com
www.invivo-group.com
replication-siane.invivo-group.com
*.invivo-group.com
communautes.invivo-group.com
neovia-group.com
mail.invivo-group.com
planet.invivo-group.com
sip.invivo-group.com
planet.invivo-group.com
replication-siane.invivo-group.com
projets.invivo-group.com
rep-gv.invivo-group.com
communautes.invivo-group.com
inmyfarm.invivo-group.com
*.hec.invivo-group.com
neovia-group.com
*.invivo-group.com
www.invivo-group.com
mobility.invivo-group.com
neovia-group.com
neovia-group.com
*.invivo-group.com
replication-siane4.invivo-group.com
*.invivo-group.com
neovia-group.com
neovia-group.com
www.invivo-group.com
www.invivo-group.com
mail.invivo-group.com
neovia-group.com
replication-siane3.invivo-group.com
everywhere.invivo-group.com
ag2021.invivo-group.com
polposition.invivo-group.com
sip.invivo-group.com
my.planet.invivo-group.com
linedi.invivo-group.com
replication-siane4.invivo-group.com
polposition.invivo-group.com
metiers.invivo-group.com
*.invivo-group.com
*.invivo-group.com
neovia-group.com
*.invivo-group.com
mail.invivo-group.com
mail.invivo-group.com
Certificate
The complete raw certificate details for *.hec.invivo-group.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIExjCCA66gAwIBAgIQApm1hyiCSf/qzZsyafezfTANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRSYXBpZFNTTCBSU0EgQ0EgMjAxODAe Fw0xOTEwMjEwMDAwMDBaFw0yMTA3MDcxMjAwMDBaMCExHzAdBgNVBAMMFiouaGVj Lmludml2by1ncm91cC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9vW6hYMH84Ntvx5IzFH7m66dTU9oJfrdrFNE0F001ytfKQdn08Zx6MsDlcdRb OgCG+sOVb6ihZCV6tfLRBiMeN307opaHYFoylYSvV1eqNFsR8IOzoF51emcl4nvX pwPzPU4mQyS+D8+wJomdCCqE+TzH1UIhD9tPqkle32Eho8lPrteCzEvYqV/LgqHn hZE2u+pTv8KoklHxYdgq6WGJDLJM7NmwO+WZk3HUmxXjNOcsklkItqUSNCUlXbt1 eGNacl1mehTyjDkDTVJ4TN1/KA4Pgl2adJPzAHLe1vMiEuhQkjM9FylvkeJ3gV13 Y6r52F/G40WqgZbb5buWMst3AgMBAAGjggG7MIIBtzAfBgNVHSMEGDAWgBRTyhdZ /GvAAyEvGq7kqqgcglbadTAdBgNVHQ4EFgQUUCmuurW0Z6O5uf619IXhERcQZKQw IQYDVR0RBBowGIIWKi5oZWMuaW52aXZvLWdyb3VwLmNvbTAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD4GA1UdHwQ3MDUwM6Ax oC+GLWh0dHA6Ly9jZHAucmFwaWRzc2wuY29tL1JhcGlkU1NMUlNBQ0EyMDE4LmNy bDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBAjAqMCgGCCsGAQUFBwIBFhxodHRwczov L3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcw JgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMucmFwaWRzc2wuY29tMD0GCCsGAQUF BzAChjFodHRwOi8vY2FjZXJ0cy5yYXBpZHNzbC5jb20vUmFwaWRTU0xSU0FDQTIw MTguY3J0MAkGA1UdEwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcN AQELBQADggEBANx+GhLIKHhltu2Pc6G3o5evX6hKqZP77oJ1k83+dMSsjrj8ymnI OiJQS0bCE/mstZZ+i0IUsBt0yY7V1lRqNKkqplYix5QRGMcTO9MARb7jMIJ5JhEY JN5iOX6EEa3Bs/DgeNZ6lDzU6VKIojVfyph+OZKoJUFGJXEeTPPdDe5awVkSiikP FtV8nGl/3vR0Kpcybur2+NC2sgPEPx1Cnfjf37qD8kVBaQmqFQ8bYZntBC8w0Z2b bxdSXx67tA2D1ZvB0L8lJss/qAfn/CtTSAM5YoxGGk3Bt+/Fth61omQXsv9vGt+q NimNKuL3/xqss7W9OqBDXPVzZqw8y9ncwmI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb1uoWDB/ODbb8eSMxR+ 5uunU1PaCX63axTRNBdNNcrXykHZ9PGcejLA5XHUWzoAhvrDlW+ooWQlerXy0QYj Hjd9O6KWh2BaMpWEr1dXqjRbEfCDs6BedXpnJeJ716cD8z1OJkMkvg/PsCaJnQgq hPk8x9VCIQ/bT6pJXt9hIaPJT67XgsxL2Klfy4Kh54WRNrvqU7/CqJJR8WHYKulh iQyyTOzZsDvlmZNx1JsV4zTnLJJZCLalEjQlJV27dXhjWnJdZnoU8ow5A01SeEzd fygOD4JdmnST8wBy3tbzIhLoUJIzPRcpb5Hid4Fdd2Oq+dhfxuNFqoGW2+W7ljLL dwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3456559235402770954001132477516067709 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-07 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.hec.invivo-group.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23952452113247281470389180767131464895837465765761994580436790539850080165876169798111804734100949447015260347526261217767042013371519264458551868870353787488402522489497452019298654220979287686890792455685751585014207299761736788056947889781691215699939183867269181841062298080890233631750321785777409783906781920407294895505953488296963599913549006592273785810514162618597281330178470492778870965529467697872346643152676389387338470704322315486994709319787167378226997577351344219238247885792191941111662942309764659850465268254179639788735378592689364278955588429329221878001715971840014826601905443654363543423863 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5029aebab5b467a3b9b9feb5f485e111171064a4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hec.invivo-group.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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