*.hec.invivo-group.com
Issued by RapidSSL RSA CA 2018
About this certificate
This digital certificate with serial number 09:bd:3c:d7:21:50:21:17:6d:f6:29:31:28:25:bb:2e was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.hec.invivo-group.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:bd:3c:d7:21:50:21:17:6d:f6:29:31:28:25:bb:2eSerial Number (int): 12945630057268360604950718676786854702
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 57:07:0b:80:59:df:a4:c3:f3:20:e4:6a:6e:f7:8b:be:2d:4a:54:7d
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75
Fingerprint (sha1): 84:98:bc:2b:cf:52:c1:5a:b9:14:a8:0b:b7:76:e8:77:7c:c0:85:f9
Fingerprint (sha256): 8e:96:e0:89:2e:0c:91:f7:11:e2:52:f4:08:9a:ad:37:74:0d:57:ad:7e:f6:8d:2c:f8:27:ab:b1:85:d4:58:2a
Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt
Revocation information
OCSP Server: http://status.rapidssl.comCRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl
Check the revocation status for certificate *.hec.invivo-group.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.hec.invivo-group.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.hec.invivo-group.com
Other certificates including the domain name invivo-group.com
(limited to 100 certificates)
neovia-group.com
replication-siane2.invivo-group.com
mail.invivo-group.com
www.gigaservices.invivo-group.com
neovia-group.com
replication-siane.invivo-group.com
*.hec.invivo-group.com
www.gigaservices.invivo-group.com
www.invivo-group.com
planet.invivo-group.com
mail.invivo-group.com
*.hec.invivo-group.com
neovia-group.com
www.invivo-group.com
mail.invivo-group.com
*.invivo-group.com
everywhere.invivo-group.com
everywhere.invivo-group.com
sip.invivo-group.com
inmyfarm.invivo-group.com
planet.invivo-group.com
*.hec.invivo-group.com
neovia-group.com
replication-siane.invivo-group.com
mobility.invivo-group.com
www.invivo-group.com
replication-siane.invivo-group.com
*.invivo-group.com
communautes.invivo-group.com
neovia-group.com
mail.invivo-group.com
planet.invivo-group.com
sip.invivo-group.com
planet.invivo-group.com
replication-siane.invivo-group.com
projets.invivo-group.com
rep-gv.invivo-group.com
communautes.invivo-group.com
inmyfarm.invivo-group.com
*.hec.invivo-group.com
neovia-group.com
*.invivo-group.com
www.invivo-group.com
mobility.invivo-group.com
neovia-group.com
neovia-group.com
*.invivo-group.com
replication-siane4.invivo-group.com
*.invivo-group.com
neovia-group.com
neovia-group.com
www.invivo-group.com
www.invivo-group.com
mail.invivo-group.com
neovia-group.com
replication-siane3.invivo-group.com
everywhere.invivo-group.com
ag2021.invivo-group.com
polposition.invivo-group.com
sip.invivo-group.com
my.planet.invivo-group.com
linedi.invivo-group.com
replication-siane4.invivo-group.com
polposition.invivo-group.com
metiers.invivo-group.com
*.invivo-group.com
*.invivo-group.com
neovia-group.com
*.invivo-group.com
mail.invivo-group.com
mail.invivo-group.com
replication-siane2.invivo-group.com
mail.invivo-group.com
www.gigaservices.invivo-group.com
neovia-group.com
replication-siane.invivo-group.com
*.hec.invivo-group.com
www.gigaservices.invivo-group.com
www.invivo-group.com
planet.invivo-group.com
mail.invivo-group.com
*.hec.invivo-group.com
neovia-group.com
www.invivo-group.com
mail.invivo-group.com
*.invivo-group.com
everywhere.invivo-group.com
everywhere.invivo-group.com
sip.invivo-group.com
inmyfarm.invivo-group.com
planet.invivo-group.com
*.hec.invivo-group.com
neovia-group.com
replication-siane.invivo-group.com
mobility.invivo-group.com
www.invivo-group.com
replication-siane.invivo-group.com
*.invivo-group.com
communautes.invivo-group.com
neovia-group.com
mail.invivo-group.com
planet.invivo-group.com
sip.invivo-group.com
planet.invivo-group.com
replication-siane.invivo-group.com
projets.invivo-group.com
rep-gv.invivo-group.com
communautes.invivo-group.com
inmyfarm.invivo-group.com
*.hec.invivo-group.com
neovia-group.com
*.invivo-group.com
www.invivo-group.com
mobility.invivo-group.com
neovia-group.com
neovia-group.com
*.invivo-group.com
replication-siane4.invivo-group.com
*.invivo-group.com
neovia-group.com
neovia-group.com
www.invivo-group.com
www.invivo-group.com
mail.invivo-group.com
neovia-group.com
replication-siane3.invivo-group.com
everywhere.invivo-group.com
ag2021.invivo-group.com
polposition.invivo-group.com
sip.invivo-group.com
my.planet.invivo-group.com
linedi.invivo-group.com
replication-siane4.invivo-group.com
polposition.invivo-group.com
metiers.invivo-group.com
*.invivo-group.com
*.invivo-group.com
neovia-group.com
*.invivo-group.com
mail.invivo-group.com
mail.invivo-group.com
Certificate
The complete raw certificate details for *.hec.invivo-group.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIExjCCA66gAwIBAgIQCb081yFQIRdt9ikxKCW7LjANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRSYXBpZFNTTCBSU0EgQ0EgMjAxODAe Fw0xOTExMTIwMDAwMDBaFw0yMTA2MzAxMjAwMDBaMCExHzAdBgNVBAMMFiouaGVj Lmludml2by1ncm91cC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUP89gqeIx3NlQ23QMsXBSGKOIwRoI9jMqYxOaY3xUHSAOrzjFKF4BfLkgkQPL JVzZ9+kxXen25JLZcA8/yq6UkedTC0c7ci/reU0KLu5Al+6goBN02L9/1gaVVdUH DZrAus3N9Ut4mU/BvxM0nGgtnRKggDfotMs1pDyB7X1APysLzncj8vR6pn9FNDT9 JPLIcaDFJ1iCezABtAjndavYxaGd1fZDUYNcQs1nRenOeB7Gr36YDzNXFb5b/r0s SnH7NNXw+tK+2tqkR9Bb0w+yfR4SomEEZQIDK9BnlLeVkYKT7l3roQdDZxm0uw86 elkE4pXmRt//l+JGm63gmLZ9AgMBAAGjggG7MIIBtzAfBgNVHSMEGDAWgBRTyhdZ /GvAAyEvGq7kqqgcglbadTAdBgNVHQ4EFgQUVwcLgFnfpMPzIORqbveLvi1KVH0w IQYDVR0RBBowGIIWKi5oZWMuaW52aXZvLWdyb3VwLmNvbTAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD4GA1UdHwQ3MDUwM6Ax oC+GLWh0dHA6Ly9jZHAucmFwaWRzc2wuY29tL1JhcGlkU1NMUlNBQ0EyMDE4LmNy bDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBAjAqMCgGCCsGAQUFBwIBFhxodHRwczov L3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcw JgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMucmFwaWRzc2wuY29tMD0GCCsGAQUF BzAChjFodHRwOi8vY2FjZXJ0cy5yYXBpZHNzbC5jb20vUmFwaWRTU0xSU0FDQTIw MTguY3J0MAkGA1UdEwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcN AQELBQADggEBABzczAGJ9lroFHtq1hT1GiYggk34ZZ1ddyYZc6nrNAERiBT2f9xI x6Sx9b8Pqn1wOLCldscUFQ+EjmUCpKFoa9MkhaCMNQ4wKX0XfC1qXdW6w5DATavG 3IWXsqIWwwVouTQ8tNbm9b9QiXEM6w61Hsd9+9jLNnzUC/87dtZPyn1xdWN4szUQ vQ/fWBfiXFHYn89MXquTY49z1xkUpn2/IjQyw9CyTha0net0sQx8eJZrk8/dD36q 8fZ1m02KfsSsWmYFNrhSu2qAPwEJ6fdthyXJLZSxrFt7eXwGF/ZqAX2cPCfKl4pr retJ+cdCnRLiBjBcWWP8iUlVO5RGHo7qSvU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D/PYKniMdzZUNt0DLFw UhijiMEaCPYzKmMTmmN8VB0gDq84xSheAXy5IJEDyyVc2ffpMV3p9uSS2XAPP8qu lJHnUwtHO3Iv63lNCi7uQJfuoKATdNi/f9YGlVXVBw2awLrNzfVLeJlPwb8TNJxo LZ0SoIA36LTLNaQ8ge19QD8rC853I/L0eqZ/RTQ0/STyyHGgxSdYgnswAbQI53Wr 2MWhndX2Q1GDXELNZ0Xpzngexq9+mA8zVxW+W/69LEpx+zTV8PrSvtrapEfQW9MP sn0eEqJhBGUCAyvQZ5S3lZGCk+5d66EHQ2cZtLsPOnpZBOKV5kbf/5fiRput4Ji2 fQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12945630057268360604950718676786854702 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-12 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-30 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.hec.invivo-group.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26793986570440873342701267722919859343725765378181805299621471318984259878953319899384799458768779539452606437483565259012894093289565010542640387365225650938084484387101727271523340100097914571935553294632148134816503454722139762549945570119012261987453155715707444315135057628875214408965242719061432106410801153515665838308998525074147701611911183782578993403726627507119237181806388024789932486338366628965288496637318015386082533597151832986989827083837460671182995307185401669450934790937998308872342750402625237350441548027446186058941431255512760754157187246587440594794653735719115377214989128206878462490237 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 57070b8059dfa4c3f320e46a6ef78bbe2d4a547d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hec.invivo-group.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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