kibicewygrywaja.pl
Issued by nazwaSSL
About this certificate
This digital certificate with serial number 5c:56:4c:ce:49:ae:8d:a8:2f:a5:ec:d5:61:9a:01:29 was issued on by nazwa.pl sp. z o.o..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Compliant certificates SHOULD NOT use the noticeRef option (RFC 5280: 4.2.1.4)
- Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
Certificate Subject
CN=kibicewygrywaja.pl,C=PL
nazwa.pl sp. z o.o.
Organization:
nazwa.pl sp. z o.o.
Organization unit: http://nazwa.pl
Organization unit: http://nazwa.pl
Country:
PL
This certificate has expire since
Certificate Details
Serial Number (hex): 5c:56:4c:ce:49:ae:8d:a8:2f:a5:ec:d5:61:9a:01:29Serial Number (int): 122737070948981038714341271679893373225
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: e3:cc:29:20:c0:6c:52:2d:50:1f:ee:57:82:86:48:2c:ef:e4:b1:6a
AuthorityKeyId: 54:dc:90:bb:9d:47:19:51:c3:79:68:2c:84:ed:2e:df:5f:46:ba:c7
Fingerprint (sha1): 1f:8f:14:06:5e:e0:e7:42:73:ab:b6:45:64:1e:0f:b9:66:67:b4:a6
Fingerprint (sha256): 59:0c:64:3b:19:4c:5d:e4:19:37:2f:0e:f2:0a:b6:1c:64:21:50:2d:53:29:ee:61:61:de:ae:96:d0:7e:0c:61
Issuing Certificate URL: http://repository.certum.pl/nazwassl2sha2.cer
Revocation information
OCSP Server: http://nazwassl2sha2.ocsp-certum.comCRL Distribution Point: http://crl.certum.pl/nazwassl2sha2.crl
Check the revocation status for certificate kibicewygrywaja.pl
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kibicewygrywaja.pl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kibicewygrywaja.pl
www.kibicewygrywaja.pl
www.kibicewygrywaja.pl
Other certificates including the domain name kibicewygrywaja.pl
(limited to 100 certificates)
Certificate
The complete raw certificate details for kibicewygrywaja.pl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIQXFZMzkmujagvpezVYZoBKTANBgkqhkiG9w0BAQsFADBY MQswCQYDVQQGEwJQTDEcMBoGA1UECgwTbmF6d2EucGwgc3AuIHogby5vLjEYMBYG A1UECwwPaHR0cDovL25hendhLnBsMREwDwYDVQQDDAhuYXp3YVNTTDAeFw0xODA3 MjIyMDQyMTBaFw0xOTA3MjIyMDQyMTBaMCoxCzAJBgNVBAYTAlBMMRswGQYDVQQD DBJraWJpY2V3eWdyeXdhamEucGwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDmphvFSNz/9Ke1uRFQLtL/ZgcKbrB9xBW3wP+e0wZGZtejdyadxCQHTGD5 VNQ+OH7awbsInvcoIMOAanCOf/59k5aF+MRM0hdQySZt+TgN/3vEtuZcqCUHcOH0 +Pjd7X0FTtYzc2Zi5NIQ0ZTaG+w8+8w1ChEAdVhcBtCRCOO2dSLrZAg5BXmljQ56 uIoLQIZxjnGl7I/5zlLA05J2pjYtusKSaxorlFp439Tl/gJDjHYCuD9ojmqgZkPh nhY0VU7+Kz0H1pGBQSrmNE36DokqAMxMGxF2py1/Fa81t00ZyMxnwA8ZlJ/zzQqW QxFHV9Er4xuVOYW4s3C0LzNCdRdZAgMBAAGjggKyMIICrjAMBgNVHRMBAf8EAjAA MDcGA1UdHwQwMC4wLKAqoCiGJmh0dHA6Ly9jcmwuY2VydHVtLnBsL25hendhc3Ns MnNoYTIuY3JsMHsGCCsGAQUFBwEBBG8wbTAwBggrBgEFBQcwAYYkaHR0cDovL25h endhc3NsMnNoYTIub2NzcC1jZXJ0dW0uY29tMDkGCCsGAQUFBzAChi1odHRwOi8v cmVwb3NpdG9yeS5jZXJ0dW0ucGwvbmF6d2Fzc2wyc2hhMi5jZXIwHwYDVR0jBBgw FoAUVNyQu51HGVHDeWgshO0u319GuscwHQYDVR0OBBYEFOPMKSDAbFItUB/uV4KG SCzv5LFqMA4GA1UdDwEB/wQEAwIFoDCCARgGA1UdIASCAQ8wggELMIIBBwYNKoRo AYb2dwIFAQkCAzCB9TCB8gYIKwYBBQUHAgIwgeUwIBYZVW5pemV0byBUZWNobm9s b2dpZXMgUy5BLjADAgECGoHAVXNhZ2Ugb2YgdGhpcyBjZXJ0aWZpY2F0ZSBpcyBz dHJpY3RseSBzdWJqZWN0ZWQgdG8gdGhlIENFUlRVTSBDZXJ0aWZpY2F0aW9uIFBy YWN0aWNlIFN0YXRlbWVudCAoQ1BTKSBpbmNvcnBvcmF0ZWQgYnkgcmVmZXJlbmNl IGhlcmVpbiBhbmQgaW4gdGhlIHJlcG9zaXRvcnkgYXQgaHR0cHM6Ly93d3cuY2Vy dHVtLnBsL3JlcG9zaXRvcnkuMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjARBglghkgBhvhCAQEEBAMCBsAwNQYDVR0RBC4wLIISa2liaWNld3lncnl3YWph LnBsghZ3d3cua2liaWNld3lncnl3YWphLnBsMBMGCisGAQQB1nkCBAMBAf8EAgUA MA0GCSqGSIb3DQEBCwUAA4IBAQDN7nsaeGAw99Kq814Y5oSNdGvNLQXtoXg8oCm4 +QEWDTx6DYxUC+kelHqROuDbm9+1atxB+guO79lGIB/Ld7TwXhHmrOcD2Hj+VbJt 1SUDHV1qoO34ewh1gfmNJPDAYV6W+PYgTGReebZyApNch7NY2Ccy9LEHQycrIRvi LJfjigaizYGODQ/scspxrY7x+jFNedmuHbQqmPoC344+RwX4e49kVod2Ov1fiyu/ kHgD/8gEkN1BFhltvquP2gl1gH6wbZ9CwJnmxD2fhEv8krLHM8huRVbNSsGj/bgv YzQ+lTEVt2SnSKmZg5lTuUUrjssFBypdb9rKIvrykQKlCBCV -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qYbxUjc//SntbkRUC7S /2YHCm6wfcQVt8D/ntMGRmbXo3cmncQkB0xg+VTUPjh+2sG7CJ73KCDDgGpwjn/+ fZOWhfjETNIXUMkmbfk4Df97xLbmXKglB3Dh9Pj43e19BU7WM3NmYuTSENGU2hvs PPvMNQoRAHVYXAbQkQjjtnUi62QIOQV5pY0OeriKC0CGcY5xpeyP+c5SwNOSdqY2 LbrCkmsaK5RaeN/U5f4CQ4x2Arg/aI5qoGZD4Z4WNFVO/is9B9aRgUEq5jRN+g6J KgDMTBsRdqctfxWvNbdNGcjMZ8APGZSf880KlkMRR1fRK+MblTmFuLNwtC8zQnUX WQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 122737070948981038714341271679893373225 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'nazwa.pl sp. z o.o.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'http://nazwa.pl' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'nazwaSSL' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-22 20:42:10 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-22 20:42:10 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'kibicewygrywaja.pl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29116721286095228146993854495063951404565874394056315139954320543869516653671504264503026830522319734119123664739969214188161775024099034141779106407526345256044065512691281906550778802078280582568668602394064952808663338522128127085773191272079890037159173635124378615629323592327006128913055874517579125029174895295181869758353842955756882466094980720498987792383100846166268094520965380669004547828519350744069022681774413908134475178352213736212545229495615558298480676416204882307975365480805505600527263904228251456695170392051119579928536880527877100601471317395560533095116987283152762250375785272372465309529 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.certum.pl/nazwassl2sha2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://nazwassl2sha2.ocsp-certum.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.certum.pl/nazwassl2sha2.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 54dc90bb9d471951c379682c84ed2edf5f46bac7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e3cc2920c06c522d501fee578286482cefe4b16a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (271 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.616.1.113527.2.5.1.9.2.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'Unizeto Technologies S.A.' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [85 115 97 103 101 32 111 102 32 116 104 105 115 32 99 101 114 116 105 102 105 99 97 116 101 32 105 115 32 115 116 114 105 99 116 108 121 32 115 117 98 106 101 99 116 101 100 32 116 111 32 116 104 101 32 67 69 82 84 85 77 32 67 101 114 116 105 102 105 99 97 116 105 111 110 32 80 114 97 99 116 105 99 101 32 83 116 97 116 101 109 101 110 116 32 40 67 80 83 41 32 105 110 99 111 114 112 111 114 97 116 101 100 32 98 121 32 114 101 102 101 114 101 110 99 101 32 104 101 114 101 105 110 32 97 110 100 32 105 110 32 116 104 101 32 114 101 112 111 115 105 116 111 114 121 32 97 116 32 104 116 116 112 115 58 47 47 119 119 119 46 99 101 114 116 117 109 46 112 108 47 114 101 112 111 115 105 116 111 114 121 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits) 06c0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kibicewygrywaja.pl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kibicewygrywaja.pl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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