lunch.swartzcreek.org

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 09:96:3e:c3:e8:c5:7a:4d:7f:9c:36:19:5f:a3:c0:76 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lunch.swartzcreek.org

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:96:3e:c3:e8:c5:7a:4d:7f:9c:36:19:5f:a3:c0:76
Serial Number (int): 12743169521770841908847579148264390774
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 61:82:c0:82:bc:10:b6:3d:39:72:66:ba:e4:ac:d7:27:34:c5:9e:5c
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): 39:53:dc:6d:fc:c4:77:50:f9:a0:df:a9:4a:24:52:5e:69:cf:2d:d2
Fingerprint (sha256): 5a:68:d5:7b:6c:8f:ea:de:2e:2d:53:29:72:f0:d9:b5:cf:5b:d9:5d:62:02:08:39:6c:70:a4:e1:aa:cb:d1:18

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate lunch.swartzcreek.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lunch.swartzcreek.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lunch.swartzcreek.org

Other certificates including the domain name swartzcreek.org

(limited to 100 certificates)
es.jmsd.org
academy.swartzcreek.org
admin.pylusdparkview.org
www.myiusd.net
www.frazierprepacademy.com
admin.kernhighnetwork.com
admin.carthage.smithcoedu.com
admin.andrews.whittiercity.net
cchs.ccusd.org
schoolsopen.swartzcreek.org
www.ps086.com
academy.swartzcreek.org
high.cusd1.com
cphs.ccusd.org
schoolsopen.swartzcreek.org
adams.scrsd.org
swartzcreek.org
vpms.icefps.org
colegiosmadison.edu.mx
admin.arroyo.scsdk8.org
academy.swartzcreek.org
bcas.burke.k12.ga.us
powerschool.swartzcreek.org
academy.swartzcreek.org
adams.scrsd.org
columbian.tiffincityschools.org
adams.scrsd.org
adams.scrsd.org
lunch.swartzcreek.org
powerschool.swartzcreek.org
lisawesthigh.lisaacademy.org
elms.swartzcreek.org
higgins.mccomb.k12.ms.us
admin.idlewildelementaryschool.wearecms.com
admin.tms.tiffincityschools.org
sandiaprep.org
coltsneckschools.org
admin.sandiaprep.org
heritagevalley.fillmoreusd.org
admin.tierralinda.scsdk8.org
www.jmsd.org
admin.smithcountymiddle.smithcoedu.com
admin.smithcountyhigh.smithcoedu.com
central.scsdk8.org
admin.bayheadschool.org
admin.arroyo.scsdk8.org
admin.ei.themethighschool.org
academy.swartzcreek.org
lms.lexingtonisd.net
schoolsopen.swartzcreek.org
lhs.lexingtonisd.net
hs.swartzcreek.org
adams.scrsd.org
admin.dieck.swartzcreek.org
www.villagetechschools.org
lisanorth.lisaacademy.org
cs.newton-conover.org
adams.scrsd.org
www.glenviewbulldogs.org
schoolsopen.swartzcreek.org
swartzcreek.org
admin.dieck.swartzcreek.org
lunch.swartzcreek.org
swartzcreek.org
www.ceam.edu.mx
www.mt-pleasant.k12.ia.us
schoolsopen.swartzcreek.org
vision.ecisd.us
ms.swartzcreek.org
vanallen.mtpcsd.org
academy.swartzcreek.org
flhfhs.org
admin.washington.tiffincityschools.org
atljewishacademy.org
wsis.scrsd.org
www.chinaspringisd.net
www.scrsd.org
scvlc.swartzcreek.org
elms.swartzcreek.org
admin.rubydrive.org
scvlc.swartzcreek.org
ljef.ljsd.org
academy.swartzcreek.org
admin.ashleyparkprek8school.wearecms.com
powerschool.swartzcreek.org
powerschool.swartzcreek.org
syring.swartzcreek.org
admin.arroyo.scsdk8.org
swartzcreek.org
ocd.ccusd.org
www.advantageacademyenroll.com
admin.andrews.whittiercity.net
adams.scrsd.org
powerschool.swartzcreek.org
adams.scrsd.org
admin.ransonmiddleschool.wearecms.com
admin.noble.tiffincityschools.org
www.swartzcreek.org
academy.swartzcreek.org
lunch.swartzcreek.org

Certificate

The complete raw certificate details for lunch.swartzcreek.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIExDCCA6ygAwIBAgIQCZY+w+jFek1/nDYZX6PAdjANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRSYXBpZFNTTCBSU0EgQ0EgMjAxODAe
Fw0xODA0MjcwMDAwMDBaFw0xODA5MjUxMjAwMDBaMCAxHjAcBgNVBAMTFWx1bmNo
LnN3YXJ0emNyZWVrLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AOjjHUzKqh/AY5OL2s3zW7BWbBFQ0WxqBsbKC/aylQELO20aHt2nDrqoo3o81JVX
4wUcOu4bc9qilhaHmDzG7mFyEidbONZiYoWMnPSnYiX0KkffU1w55z2ru6D+uT+o
FZS0PVMhwSUk+O8M11Lki8yNExqZeB6DC+heNGYwMxDbfo7RGk8WMlDbQng5bUJ7
LjY5eUd2NFngs3SRaksysZzDwSUg4TrUJE24hBCMlnRtrG2n5bxARrWgWc/4+r1c
uDmrXmOTs3IjzqyS0I+bRwN7QBQ20rBJCMI2mlwwJ8PgKkA6fNbEJhicdsnRr28Q
yR4QriPnVSTYzX81cjvKszMCAwEAAaOCAbowggG2MB8GA1UdIwQYMBaAFFPKF1n8
a8ADIS8aruSqqByCVtp1MB0GA1UdDgQWBBRhgsCCvBC2PTlyZrrkrNcnNMWeXDAg
BgNVHREEGTAXghVsdW5jaC5zd2FydHpjcmVlay5vcmcwDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA+BgNVHR8ENzA1MDOgMaAv
hi1odHRwOi8vY2RwLnJhcGlkc3NsLmNvbS9SYXBpZFNTTFJTQUNBMjAxOC5jcmww
TAYDVR0gBEUwQzA3BglghkgBhv1sAQIwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93
d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMCYG
CCsGAQUFBzABhhpodHRwOi8vc3RhdHVzLnJhcGlkc3NsLmNvbTA9BggrBgEFBQcw
AoYxaHR0cDovL2NhY2VydHMucmFwaWRzc2wuY29tL1JhcGlkU1NMUlNBQ0EyMDE4
LmNydDAJBgNVHRMEAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCqcktxTfJaoGw449YanM5TKHaytPkDXtdsl0oqmXzWfw5/kDSKe6sD
TICPhblKqrPG30GRTT8BgPEE6UF7s3I+tK4B5YiWMmTiyN12vHIyswlJyUlhT55o
1+TZkNnraimBTcUi2iOB+0i+fEh2nNqLvrTa1u76WN2G5i/R/U6KE6y61S1WPoND
wp3guoiAt0v0CQdD9QA5bEa9rM3vxPMX3y5ZCmHJHqLotxXiq//cA8n8sqnNY7em
NTinclElzrsWnc0gjbutHnFV2LYeIRFtHS6He9ctV2taXNn0wj+MMOsh6oYsU4bD
McTXLaOui0EesWM0PP8p4r8Zh7iF+zUY
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OMdTMqqH8Bjk4vazfNb
sFZsEVDRbGoGxsoL9rKVAQs7bRoe3acOuqijejzUlVfjBRw67htz2qKWFoeYPMbu
YXISJ1s41mJihYyc9KdiJfQqR99TXDnnPau7oP65P6gVlLQ9UyHBJST47wzXUuSL
zI0TGpl4HoML6F40ZjAzENt+jtEaTxYyUNtCeDltQnsuNjl5R3Y0WeCzdJFqSzKx
nMPBJSDhOtQkTbiEEIyWdG2sbaflvEBGtaBZz/j6vVy4OateY5OzciPOrJLQj5tH
A3tAFDbSsEkIwjaaXDAnw+AqQDp81sQmGJx2ydGvbxDJHhCuI+dVJNjNfzVyO8qz
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12743169521770841908847579148264390774
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lunch.swartzcreek.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29399281062983902693810685488633844752218229140302704791162477184558890841687713235501460340602089635046527656695671999192956462262012893676295098646339078966469320891645753295671853030220407549316818471336689964079542448612511526154221254220130985679698209036629826974746491768531221935670426428529547188966653131047290709789969952168425333464213998490340012617698444735167974936310481874932558797733083798539154919611137984919239574953138008311404141433347176668836964158868222381238657218820102581141619386403373561200110071246374194074639379761861037130419401877231172492351704261941446453487037909483819981517619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6182c082bc10b63d397266bae4acd72734c59e5c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lunch.swartzcreek.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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