*.apps.paas-dev.psnc.pl

- Instytut Chemii Bioorganicznej Polskiej Akademii Nauk -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 04:1d:05:51:46:0f:87:cc:54:cc:2f:c5:5d:2e:1a:75 was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Instytut Chemii Bioorganicznej Polskiej Akademii Nauk

Organization: Instytut Chemii Bioorganicznej Polskiej Akademii Nauk
Organization unit: Instytut Chemii Bioorganicznej Polskiej Akademii Nauk
Locality: Poznań
Country: PL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1d:05:51:46:0f:87:cc:54:cc:2f:c5:5d:2e:1a:75
Serial Number (int): 5467596443249081270115741454346099317
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: cb:91:b8:df:a2:ae:e7:63:42:b1:3c:b8:33:74:88:36:49:b1:7d:81
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): ba:64:a5:8b:af:a7:61:e7:c1:dd:dd:3a:e9:89:96:7c:73:f1:a3:e2
Fingerprint (sha256): 78:a5:39:c4:46:cd:ee:f3:3a:ab:c6:7a:a4:88:0b:5b:e1:27:62:9b:75:ec:88:27:6a:e2:b6:38:f1:95:c1:28

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate *.apps.paas-dev.psnc.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.apps.paas-dev.psnc.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.apps.paas-dev.psnc.pl
apps.paas-dev.psnc.pl

Other certificates including the domain name psnc.pl

(limited to 100 certificates)
pracelab-sso.apps.paas.psnc.pl
eurocase2017.psnc.pl
lonicera.man.poznan.pl
www.pcss.pl
conference4me.psnc.pl
test-vm5.vph.psnc.pl
nogalia.man.poznan.pl
indico.conference4me.psnc.pl
helps.psnc.pl
indico.conference4me.psnc.pl
box.psnc.pl
demo.dl.psnc.pl
indico2.conference4me.psnc.pl
pbl-test.dl.psnc.pl
pbl.dl.psnc.pl
www.pogoda.man.poznan.pl
hicss.psnc.pl
meet.psnc.pl
demo.storage.psnc.pl
nagios.paas.psnc.pl
pay.psnc.pl
futurelabs.psnc.pl
registry-console.apps.paas.psnc.pl
indico.conference4me.psnc.pl
nogalia.man.poznan.pl
*.apps.paas.psnc.pl
docs.psnc.pl
support.pcss.pl
indico.conference4me.psnc.pl
dynafed1.indigo.psnc.pl
box.psnc.pl
waitsafe-mqtt.apps.paas-dev.psnc.pl
rotha.dlibra.psnc.pl
box.everest.psnc.pl
pbl.dl.psnc.pl
box.psnc.pl
support.pcss.pl
indico2.conference4me.psnc.pl
pogoda.man.poznan.pl
box.psnc.pl
lta-download.lofar.psnc.pl
lib.psnc.pl
dynafed3.indigo.psnc.pl
nogalia.man.poznan.pl
dl.psnc.pl
docs.psnc.pl
indico.conference4me.psnc.pl
support.pcss.pl
dingo.psnc.pl
mir.dlibra.psnc.pl
mail.mic.psnc.pl
cdn.classroom.psnc.pl
eurocase2017.psnc.pl
sentry.apps.psnc.pl
dingo.psnc.pl
vuln-mgmt.security.psnc.pl
lonicera.man.poznan.pl
edusafe.psnc.pl
www.pcss.pl
indico2.conference4me.psnc.pl
indico.conference4me.psnc.pl
*.apps.paas.psnc.pl
conference4me.psnc.pl
docs.psnc.pl
indico.conference4me.psnc.pl
net-assets-mgmt.security.psnc.pl
box.psnc.pl
conference4me.psnc.pl
iiif.ecloud.psnc.pl
ci.nds.psnc.pl
box.everest.psnc.pl
dl.psnc.pl
dynafed2.indigo.psnc.pl
box.psnc.pl
lonicera.man.poznan.pl
oneprovider.indigo.psnc.pl
repokb.dlibra.psnc.pl
meet.psnc.pl
nogalia.man.poznan.pl
scenemanagement.test.ksi.apps.psnc.pl
qcg-monitoring.man.poznan.pl
nds.psnc.pl
box.psnc.pl
repository2.netradio.psnc.pl
dingo.psnc.pl
box.psnc.pl
login.nebi.psnc.pl
pbl.dlibra.psnc.pl
pbl.dl.psnc.pl
psnc.pl
lonicera.man.poznan.pl
siem.security.psnc.pl
demo.dl.psnc.pl
meet.psnc.pl
weekly.psnc.pl
indico.conference4me.psnc.pl
helps.psnc.pl
*.apps.paas-dev.psnc.pl
sso.everest.psnc.pl
indico.conference4me.psnc.pl

Certificate

The complete raw certificate details for *.apps.paas-dev.psnc.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyam5/fiFFsSAoTjJN7Dn
JL4g0CfReEn3o8bNDBPlLyO0hn0ZV7Sui4KHoRIUX8GhkNqSeJsoiYyfQA6Uu7Cx
kQ4uNf+rb02h5u+uwjq7gvNS8xCC4AJuPiP8eWP0YnAqEn825t82DndBrpowbT5d
kFuoA1TnWNOBHlVDfTJwbomzbDM7NEh/GVWuLP54yorCkHepKD5vbjg0ApqjFRm6
2RihDgi3bNqmFzg1TNlfhtDKv1I8Ht0YWWMMh4AA7gonD7A8wwC9d/aZIIlZDkqk
YLMHNIXwQdbaCHO//2TbN+hJ1uBgn50bv/qGiYlZRovcuAckcb91lKQqtIuqwmeY
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5467596443249081270115741454346099317
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-14 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Poznań'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Instytut Chemii Bioorganicznej Polskiej Akademii Nauk'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Instytut Chemii Bioorganicznej Polskiej Akademii Nauk'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.apps.paas-dev.psnc.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25457594570243974989129037794853092490661655728624589388283006600605011001285794547954555358533178581312357961998716678778100617910153309219371265203904454567778090557257647101746944599732790796418247598392292467640889518618581460357303540987077918987749997320815318930263401408304412308803882541149895307618009974466352644580068794023588969139737324353064317517675274522758100780576172573393608628956292712078390684236430277458641851018495056648987688331252372793534551098273518448024953542611832570306026659922631961138094315667133851527042760577771869156566263226122143422481252011565892308103113128994661101705317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb91b8dfa2aee76342b13cb83374883649b17d81
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apps.paas-dev.psnc.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.paas-dev.psnc.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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