idp.sca.com

- Svenska Cellulosa Aktiebolaget SCA -

Issued by Telia Server CA v3

About this certificate

This digital certificate with serial number 01:8e:a1:63:6f:3b:e7:ca:d9:ff:68:ca:a8:7a:c6 was issued on by Telia Finland Oyj.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Svenska Cellulosa Aktiebolaget SCA

Organization: Svenska Cellulosa Aktiebolaget SCA
Locality: Sundsvall
Country: SE

Telia Finland Oyj

Organization: Telia Finland Oyj
Country: FI

This certificate will expire on

Certificate Details

Serial Number (hex): 01:8e:a1:63:6f:3b:e7:ca:d9:ff:68:ca:a8:7a:c6
Serial Number (int): 8085185529907795114834435856956102
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: 7b:d8:d8:a5:aa:93:44:e1:8a:88:ef:ac:2b:56:99:6b:99:5f:ad:a1
AuthorityKeyId: 46:66:8d:0e:07:23:16:b0:ea:4f:05:eb:96:5a:de:a5:ee:c9:7e:a4

Fingerprint (sha1): 6f:ee:51:7d:80:01:b6:7a:ba:d6:ad:29:e2:01:dc:38:ab:aa:8d:32
Fingerprint (sha256): 8d:3f:85:e7:2c:46:08:ec:ab:5b:6c:b0:44:bc:6a:01:a9:18:62:e5:fe:51:ac:1f:2c:0e:d3:5c:de:6a:f2:4d

Issuing Certificate URL: http://cps.trust.telia.com/teliaservercav3.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://httpcrl.trust.telia.com/teliaservercav3.crl

Check the revocation status for certificate idp.sca.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for idp.sca.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

idp.sca.com

Other certificates including the domain name sca.com

(limited to 100 certificates)
fpportaltest.sca.com
mail.sca.com
*.sca.com
extlogin.sca.com
ap1.sca.com
kortportal.sca.com
passg-svc.forestproducts.sca.com
drive.sca.com
mdm.sca.com
fpconnect.sca.com
confluence.sca.com
loginfp.sca.com
loginfp.sca.com
dlogon.sca.com
jira.sca.com
*.sca.com
*.sca.com
extlogin.sca.com
www.sca.com
gateway.logistics.sca.com
remote.sca.com
gw-us.sca.com
login.sca.com
*.app.sca.com
extlogin-test.sca.com
*.sca.com
passwordreset.sca.com
abbgenixostr01.sca.com
storefront.forestproducts.sca.com
passwordreset.sca.com
drive.sca.com
fritid.sca.com
gateway.logistics.sca.com
fritid.sca.com
*.sca.com
guestauth.sca.com
storefront.forestproducts.sca.com
extlogin-test.sca.com
www.sca.com
gw-us.sca.com
imagevault.sca.com
mdmadmin.sca.com
test-bbs.sca.com
fpportal.sca.com
access.scasundsvall.se
fpsams.sca.com
www.sca.com
bbs.sca.com
crmauth.sca.com
mdm.sca.com
*.sca.com
integration.sca.com
idusis.sca.com
mdmadmin.sca.com
*.app.sca.com
integration.sca.com
fritid.sca.com
genai-test.sca.com
*.sca.com
*.app.sca.com
*.app.sca.com
passg-svc.forestproducts.sca.com
imagevault.sca.com
www.sca.com
gw-se.sca.com
mail.sca.com
gw-hk.sca.com
sip.sca.com
imagevault.sca.com
storefront.forestproducts.sca.com
login.sca.com
*.sca.com
fpportaltest.sca.com
www.sca.com
internalcrm.sca.com
*.sca.com
*.sca.com
gateway.logistics.sca.com
*.sca.com
imagevault.sca.com
remote.sca.com
integration.sca.com
remote.sca.com
www.sca.com
access.sca.com
fpportal.sca.com
idp.sca.com
*.app.sca.com
www.sca.com
bildarkiv.sca.com
ap1.sca.com
fpsync.sca.com
*.sca.com
test-confluence.sca.com
mail.sca.com
mysite.fpportal.sca.com
*.sca.com
fplcsvc.sca.com
jira.sca.com
fpps.sca.com

Certificate

The complete raw certificate details for idp.sca.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFzjCCA7agAwIBAgIPAY6hY28758rZ/2jKqHrGMA0GCSqGSIb3DQEBCwUAMEYx
CzAJBgNVBAYTAkZJMRowGAYDVQQKDBFUZWxpYSBGaW5sYW5kIE95ajEbMBkGA1UE
AwwSVGVsaWEgU2VydmVyIENBIHYzMB4XDTI0MDQwMzAwMzcxMloXDTI1MDQwMzAw
MzcxMlowZDELMAkGA1UEBhMCU0UxEjAQBgNVBAcMCVN1bmRzdmFsbDErMCkGA1UE
CgwiU3ZlbnNrYSBDZWxsdWxvc2EgQWt0aWVib2xhZ2V0IFNDQTEUMBIGA1UEAwwL
aWRwLnNjYS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLqP5k
dFTPWiVrbPxvjpGfX6fietFp0wmuhJViS7d9F11ED48RkpHGo3UtALe6un43CPU/
pHUXHov07hdr6/PQeYfhETKohSo7d0VKL0LgmOd3hBkqsz8FpHCY4475Ci5NKdLx
eDuS5+DolY81tR6ctyrbh921xJggKIxfSm/Q9ETWxIa1IDgsWizpl1okswIynRGS
Ai2O+iBvtbkd8yTs6/jGAfb28xzc0YeilmMlEYkJVzHIYTzIYeHSZMiaWVeiyrzh
r4d9ijGBXRhLdPdfitmGy+2hhRSkvfTiZjXbedQSj0UKZIy0WW8QFvY5QMkaxTUI
r1uFLDXAKeXsj6PNAgMBAAGjggGZMIIBlTAfBgNVHSMEGDAWgBRGZo0OByMWsOpP
BeuWWt6l7sl+pDAdBgNVHQ4EFgQUe9jYpaqTROGKiO+sK1aZa5lfraEwDgYDVR0P
AQH/BAQDAgWgMD0GA1UdIAQ2MDQwMgYGZ4EMAQICMCgwJgYIKwYBBQUHAgEWGmh0
dHA6Ly9jcHMudHJ1c3QudGVsaWEuY29tMBYGA1UdEQQPMA2CC2lkcC5zY2EuY29t
MEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly9odHRwY3JsLnRydXN0LnRlbGlhLmNv
bS90ZWxpYXNlcnZlcmNhdjMuY3JsMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEF
BQcDATBzBggrBgEFBQcBAQRnMGUwJwYIKwYBBQUHMAGGG2h0dHA6Ly9vY3NwLnRy
dXN0LnRlbGlhLmNvbTA6BggrBgEFBQcwAoYuaHR0cDovL2Nwcy50cnVzdC50ZWxp
YS5jb20vdGVsaWFzZXJ2ZXJjYXYzLmNlcjATBgorBgEEAdZ5AgQDAQH/BAIFADAN
BgkqhkiG9w0BAQsFAAOCAgEANo//jwD1fVYXPiLvHPAx10sxSHT0bgr+3bLZj2Ho
0xodbtfsQr21XDwG+LYsZkV/h2ydBhEoqLtENJQq+e2MSMXuptH5dMOtak/yaCUb
4PAuatm8ijUtn4Jkmee+pqObXTO8D2HDKcLjcWkwhcB047rMbpXiIYvdBwFeylU1
j1iRg20sYXJDLtTj+ycQP7ojiWFD3qKI6TNTN+tPmFk5TPYCl5XfEy7sxZv7jyrS
20qM7EN3I8SQ16LgnpEjkmk0AnhJy06eaxeaH9pp92DSHN0xLLyiyTBR+HBMYHmy
bxx9XB48YVWE/6xz3X19i9RCVx/Em+bGnqkPCkIEIGk+qn+7eFxpGzQXkEa2DgYj
RpGp9FOx/IhAfaJvpMJeLCLO0chypcVhAaYV4CTW1AxQQCCIT2sjVvG6vDSaahJK
YWHMvqBgQiMLG4IdhlbHWIPKZ/clG0YLyMGhBAfYgpOrY6jzCVVTWO/onAbvubdH
00eG2cJuf06J9qm5Y/SSJptCdGoumQePP3fqH+5ARBC+QhdCDM10GNmaTP6KCaNM
8BK+wM3AFA8WrOffuPkkLZgS32juVNIDPLO6lXhDR9lhmoLmrVKE+QdMRS35GdNX
sWjYrc3LUBKzsesBlppJoCJXGxv7lysxabY0J/h2G5Sub4fNeSIlX/Q/Te9R1fvb
4FM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6j+ZHRUz1ola2z8b46R
n1+n4nrRadMJroSVYku3fRddRA+PEZKRxqN1LQC3urp+Nwj1P6R1Fx6L9O4Xa+vz
0HmH4REyqIUqO3dFSi9C4Jjnd4QZKrM/BaRwmOOO+QouTSnS8Xg7kufg6JWPNbUe
nLcq24fdtcSYICiMX0pv0PRE1sSGtSA4LFos6ZdaJLMCMp0RkgItjvogb7W5HfMk
7Ov4xgH29vMc3NGHopZjJRGJCVcxyGE8yGHh0mTImllXosq84a+HfYoxgV0YS3T3
X4rZhsvtoYUUpL304mY123nUEo9FCmSMtFlvEBb2OUDJGsU1CK9bhSw1wCnl7I+j
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8085185529907795114834435856956102
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telia Finland Oyj'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telia Server CA v3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 00:37:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-03 00:37:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sundsvall'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Svenska Cellulosa Aktiebolaget SCA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'idp.sca.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25709709817493474449096603690970663412381751311178475367434948114394889237885856271221005758626411612377315803951398696425315953627282573721311687758937789780180600170774446541453314591692781347042389153915418271093249110532407838459538442708344047249743005443965600297083706870739779811212634334266460416705910060980613571930397310884695197531100592061925841121974468942151096549653119850043009545692425309880910722451133238771383864401967463609039204807851096555466506130845491715843700820931863108638326897383910177691811038844608884684924200479107494716503196566799853635463951812631322009147623518211995687953357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 46668d0e072316b0ea4f05eb965adea5eec97ea4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7bd8d8a5aa9344e18a88efac2b56996b995fada1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.trust.telia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp.sca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://httpcrl.trust.telia.com/teliaservercav3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cps.trust.telia.com/teliaservercav3.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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