winter.dacia.ch

Issued by Certum Domain Validation CA SHA2

About this certificate

This digital certificate with serial number 39:99:ff:69:66:f4:9d:e8:95:1c:0b:59:bd:3c:86:0a was issued on by Unizeto Technologies S.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates SHOULD NOT use the noticeRef option (RFC 5280: 4.2.1.4)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)

Certificate Subject

CN=winter.dacia.ch,C=FR,1.2.840.113549.1.9.1=#0c1061646d696e406d616b6f6c61622e706c

Unizeto Technologies S.A.

Organization: Unizeto Technologies S.A.
Organization unit: Certum Certification Authority
Country: PL

This certificate has expire since

Certificate Details

Serial Number (hex): 39:99:ff:69:66:f4:9d:e8:95:1c:0b:59:bd:3c:86:0a
Serial Number (int): 76565597544365223160085799700067550730
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: f5:13:60:64:ca:19:69:64:ae:46:1d:e2:a0:57:91:0d:8e:d9:a2:c4
AuthorityKeyId: e5:31:ad:bf:3a:11:96:f4:83:bc:50:3c:d4:b7:90:9b:90:ee:de:25

Fingerprint (sha1): 08:8f:4f:5b:5e:02:1f:86:f9:ca:bf:95:16:cd:fe:c2:7e:fd:13:34
Fingerprint (sha256): 63:03:be:20:07:4b:40:c5:3f:6d:20:97:22:f2:da:42:2f:f9:08:3d:e7:8a:ec:f7:b0:c9:83:42:c0:d4:c2:b8

Issuing Certificate URL: http://repository.certum.pl/dvcasha2.cer

Revocation information

OCSP Server: http://dvcasha2.ocsp-certum.com
CRL Distribution Point: http://crl.certum.pl/dvcasha2.crl

Check the revocation status for certificate winter.dacia.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for winter.dacia.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

winter.dacia.ch
www.winter.dacia.ch

Other certificates including the domain name dacia.ch

(limited to 100 certificates)
media.renault.ch
webforms.dacia.ch
odc-ctrl.alpinecars.at
accessoires.renault.fr
winter.dacia.ch
*.wrd-aws.com
accessoires.renault.fr
media.renault.ch
*.wrd-aws.com
*.wrd-aws.com
www.dacia.be
gdl.renault.fr
www.leasing.dacia.ch
gdl-ctrl.renault.fr
*.wrd-aws.com
gigya-prod-eu1.renew.auto
gdl-ctrl.renault.fr
wintercheck.dacia.ch
media.renault.ch
wintercheck.dacia.ch
gdl.renault.fr
staging.dacia.be
conf.dacia.ch
*.wrd-aws.com
odc-ctrl.alpinecars.at
conf.dacia.ch
staging.dacia.be
mysandero.dacia.be
odc.renault.fr
*.wrd-aws.com
www.renault.fr
webforms.dacia.ch
gdl.renault.fr
gdl.renault.fr
*.wrd-aws.com
media.renault.ch
gdl-ctrl.renault.fr
winter.dacia.ch
lcl.renault.fr
forms.dacia.ch
www.dacia.be
conf.dacia.ch
*.wrd-aws.com
m.dacia.ch
webforms.dacia.ch
gdl.renault.fr
*.wrd-aws.com
accessoires.renault.fr
staging.dacia.be
www.leasing.dacia.ch
dacia-tage.ch
*.wrd-aws.com
opo.dacia.ch
media.renault.ch
odc-ctrl.alpinecars.at
*.wrd-aws.com
*.wrd-aws.com
opo.dacia.ch
*.wrd-aws.com
www.renault.fr
lcl.renault.fr
media.renault.ch
conf.dacia.ch
www.renault.fr
lcl.renault.fr
news.dacia.ch
daciashop.fr
lcl-ctrl.renault.fr
*.wrd-aws.com
media.renault.ch
lcl-ctrl.renault.fr
winter.dacia.ch
odc-ctrl.alpinecars.at
media.renault.ch
*.wrd-aws.com
www.renault.fr
accessoires.renault.fr
odc.renault.fr
media.renault.ch
odc.renault.fr
conf.dacia.ch
webforms.dacia.ch
www.leasing.dacia.ch
gigya-prod-eu1.renew.auto
media.renault.ch
webforms.dacia.ch
*.wrd-aws.com
*.wrd-aws.com
odc.renault.fr
lcl-ctrl.renault.fr
*.wrd-aws.com
media.renault.ch
odc-ctrl.alpinecars.at
*.wrd-aws.com
news.dacia.ch
*.wrd-aws.com

Certificate

The complete raw certificate details for winter.dacia.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSrSYG9zgwUULtQaOvsp
954WelzTY6NXSkt3kdSXf7Nq2p657K5dk33HoWf8NFVhkyqb1/YQi0PlgcpjvVFX
R3WotzaEkEdGyQRNUvAT85reSQoEHM7rBHZMb4q7bC45N+8VcZTC4cbAjilpIP3X
spM0tvCrUOgjSeVm+otktd8khRaAjhEGVFw6XreRQK923i5RFdG2hvdmEtPALsA8
3p08meRQXvxUkYs5oLYDl6KSAXYRPm/az+2mDQ7NzbfMoJfD+lnTlNH/boFo8sHb
NE6Vd9p5bxyYxx3dcQMKWjHiaQYSx+La71VdvnTKWYVEsRGo1gMzOhcb/SL9uN7f
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 76565597544365223160085799700067550730
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unizeto Technologies S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certum Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certum Domain Validation CA SHA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-29 18:47:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-29 18:47:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'winter.dacia.ch'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24385109067145061468138806642425268492915064338078032432720831932320879477076790884443165437030677489136107002984426893956854509481156727518522896873959413891428248761197309114685126515711776720071604870048725067588305812125336686778717566035072941088362735419236563807092772990433070115200600021328098743233239084219626392864174172014859545753487830590867472469608592551813063549619199727550244376209443703275688298529733427454055089640415336994663894272044852627467057840763143004718138010104996053815768179291830412222160409450616699921245245398556104457553992879380137713780200544861464804433005117520761371680553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.certum.pl/dvcasha2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://dvcasha2.ocsp-certum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.certum.pl/dvcasha2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e531adbf3a1196f483bc503cd4b7909b90eede25
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f5136064ca196964ae461de2a057910d8ed9a2c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (309 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.616.1.113527.2.5.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.certum.pl/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'Unizeto Technologies S.A.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [85 115 97 103 101 32 111 102 32 116 104 105 115 32 99 101 114 116 105 102 105 99 97 116 101 32 105 115 32 115 116 114 105 99 116 108 121 32 115 117 98 106 101 99 116 101 100 32 116 111 32 116 104 101 32 67 69 82 84 85 77 32 67 101 114 116 105 102 105 99 97 116 105 111 110 32 80 114 97 99 116 105 99 101 32 83 116 97 116 101 109 101 110 116 32 40 67 80 83 41 32 105 110 99 111 114 112 111 114 97 116 101 100 32 98 121 32 114 101 102 101 114 101 110 99 101 32 104 101 114 101 105 110 32 97 110 100 32 105 110 32 116 104 101 32 114 101 112 111 115 105 116 111 114 121 32 97 116 32 104 116 116 112 115 58 47 47 119 119 119 46 99 101 114 116 117 109 46 112 108 47 114 101 112 111 115 105 116 111 114 121 46]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winter.dacia.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winter.dacia.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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