*.lonelyplanet.de
Issued by thawte DV SSL SHA256 CA
About this certificate
This digital certificate with serial number 66:09:71:ba:b0:c1:b8:53:75:04:50:1a:5d:68:ba:a1 was issued on by thawte, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=*.lonelyplanet.de
thawte, Inc.
Organization:
thawte, Inc.
Organization unit: Domain Validated SSL
Organization unit: Domain Validated SSL
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 66:09:71:ba:b0:c1:b8:53:75:04:50:1a:5d:68:ba:a1Serial Number (int): 135630292945215227643456707189530999457
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 7d:29:31:2f:c1:1e:6e:ae:31:05:6a:b3:eb:1c:cd:a9:dd:ae:80:9a
Fingerprint (sha1): a8:33:ae:76:78:92:20:61:37:e6:d5:d3:54:06:88:5e:4d:e0:9d:f7
Fingerprint (sha256): ae:8e:a2:df:ff:0b:89:b0:f9:33:57:86:d7:db:ff:86:2d:a1:d3:51:a1:a6:63:da:3b:4a:c1:39:20:f5:86:cc
Issuing Certificate URL: http://tm.symcb.com/tm.crt
Revocation information
OCSP Server: http://tm.symcd.comCRL Distribution Point: http://tm.symcb.com/tm.crl
Check the revocation status for certificate *.lonelyplanet.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.lonelyplanet.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.lonelyplanet.de
lonelyplanet.de
lonelyplanet.de
Other certificates including the domain name lonelyplanet.de
(limited to 100 certificates)
shop1.lonelyplanet.de
shop1.lonelyplanet.de
shop.lonelyplanet.de
shop1.lonelyplanet.de
shop1.lonelyplanet.de
shop1.lonelyplanet.de
shop.lonelyplanet.de
shop.lonelyplanet.de
shop.lonelyplanet.de
shop1.lonelyplanet.de
shop.lonelyplanet.de
*.lonelyplanet.de
*.lonelyplanet.de
shop1.lonelyplanet.de
*.lonelyplanet.de
*.lonelyplanet.de
*.lonelyplanet.de
shop.lonelyplanet.de
shop1.lonelyplanet.de
*.lonelyplanet.de
shop1.lonelyplanet.de
shop.lonelyplanet.de
*.lonelyplanet.de
shop1.lonelyplanet.de
shop1.lonelyplanet.de
shop.lonelyplanet.de
shop1.lonelyplanet.de
shop.lonelyplanet.de
*.lonelyplanet.de
shop1.lonelyplanet.de
shop.lonelyplanet.de
*.lonelyplanet.de
shop1.lonelyplanet.de
shop1.lonelyplanet.de
shop1.lonelyplanet.de
shop.lonelyplanet.de
shop1.lonelyplanet.de
shop1.lonelyplanet.de
shop1.lonelyplanet.de
shop.lonelyplanet.de
shop.lonelyplanet.de
shop.lonelyplanet.de
shop1.lonelyplanet.de
shop.lonelyplanet.de
*.lonelyplanet.de
*.lonelyplanet.de
shop1.lonelyplanet.de
*.lonelyplanet.de
*.lonelyplanet.de
*.lonelyplanet.de
shop.lonelyplanet.de
shop1.lonelyplanet.de
*.lonelyplanet.de
shop1.lonelyplanet.de
shop.lonelyplanet.de
*.lonelyplanet.de
shop1.lonelyplanet.de
shop1.lonelyplanet.de
shop.lonelyplanet.de
shop1.lonelyplanet.de
shop.lonelyplanet.de
*.lonelyplanet.de
shop1.lonelyplanet.de
shop.lonelyplanet.de
*.lonelyplanet.de
shop1.lonelyplanet.de
shop1.lonelyplanet.de
Certificate
The complete raw certificate details for *.lonelyplanet.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgIQZglxurDBuFN1BFAaXWi6oTANBgkqhkiG9w0BAQsFADBl MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMR0wGwYDVQQLExRE b21haW4gVmFsaWRhdGVkIFNTTDEgMB4GA1UEAxMXdGhhd3RlIERWIFNTTCBTSEEy NTYgQ0EwHhcNMTcwMzAxMDAwMDAwWhcNMjAwMjI5MjM1OTU5WjAcMRowGAYDVQQD DBEqLmxvbmVseXBsYW5ldC5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC ggIBAM60WbjVO91JuGI55fughxsgX8ViexAvaVSYCR/w260JhcH/aXfIsrAjjfEH 2mlv/b7oCsJI0HBl3bNH/Uc4Y2H3mhNwDcBIT10M+XdCTAuqH54tjX3nfhPoyUlX 7gmMQDBj6wRVOm08TzQWic+mxzI25lCwXYdPzW5bpsiPyHz7U1+JlktAS/nLi0ej HVoeRQ8dGw7X2ZAwbyR3v7atCpX4+leJXoUddKRKsa5T1Pf1HNJjT3Z4tJ+Kkqf+ 9DhnQmdzc0KItuqIUdr91rfprfLAxxGvdbpluYuQw8a2HUjlRtrs7BArsn1XrX5c dvekvvfvK7V4yxp8Y719yEpy+BaaFYWIh1D5OKoE2ysJwuiDVigt2nmJmv4RFsO9 gt4QWvVep4XZpSI5fndrEq+wsICMTt52zch12PnOqRDldBUci3p7EBIsDkLYarkX C9scW82cAoZ+iBQxsoejzZe5mZpdTaZsw1lrE2HvUU4eD66Sdd522gAZzsH7S6/l Cgi3be7kotn+L4hKoZYJB3N6gXTdAvKekHuooSYxXrYJTLTkUz9aMzoMaTBokwq5 f4jAhmSI7I4nT9Gtx6qcCtYA/NV+dGK6p6fHaFgQ8kpGNqpUGB9igh8B14Iby+Te 3gC/PEUWeQqvu42x4MRSz3nDMZO6IT/KPIllDE3isysDEy0XAgMBAAGjggGZMIIB lTAtBgNVHREEJjAkghEqLmxvbmVseXBsYW5ldC5kZYIPbG9uZWx5cGxhbmV0LmRl MAkGA1UdEwQCMAAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL3RtLnN5bWNiLmNv bS90bS5jcmwwbgYDVR0gBGcwZTBjBgZngQwBAgEwWTAmBggrBgEFBQcCARYaaHR0 cHM6Ly93d3cudGhhd3RlLmNvbS9jcHMwLwYIKwYBBQUHAgIwIwwhaHR0cHM6Ly93 d3cudGhhd3RlLmNvbS9yZXBvc2l0b3J5MB8GA1UdIwQYMBaAFH0pMS/BHm6uMQVq s+sczandroCaMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vdG0u c3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vdG0uc3ltY2IuY29tL3RtLmNy dDATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAircn0DqH cJh98uwV7kXiK//PZwlhVzgCd5iODDEdcccH27SayCeCCmIi3dXrRGdSwK0LMDSL Qwj+/kGtLakTqpJ1xNkkeT/p2lvJc5N2s69l6TtZ8KUaIRXMpd0+u5ri/tONV3vm QFX0xx80CJIR015D7/FGD5vkrsbvCbAzy2jn5/607QW5r+ZoaiRGJwkk89em2oGe MbNmEtKU4n73nDFrKdfrVfcnMOveUqUqCrqihtwL4HTK8w5XrdHO4JX0AgcUnLWi q5758+tL4vlCUYBuoG4zq7YPerNvrqKCeGS4Lh0q2/OTvfi2OxSrtkp8lgv/FR2t K6cz1wnnou/oTw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzrRZuNU73Um4Yjnl+6CH GyBfxWJ7EC9pVJgJH/DbrQmFwf9pd8iysCON8QfaaW/9vugKwkjQcGXds0f9Rzhj YfeaE3ANwEhPXQz5d0JMC6ofni2Nfed+E+jJSVfuCYxAMGPrBFU6bTxPNBaJz6bH MjbmULBdh0/NblumyI/IfPtTX4mWS0BL+cuLR6MdWh5FDx0bDtfZkDBvJHe/tq0K lfj6V4lehR10pEqxrlPU9/Uc0mNPdni0n4qSp/70OGdCZ3NzQoi26ohR2v3Wt+mt 8sDHEa91umW5i5DDxrYdSOVG2uzsECuyfVetflx296S+9+8rtXjLGnxjvX3ISnL4 FpoVhYiHUPk4qgTbKwnC6INWKC3aeYma/hEWw72C3hBa9V6nhdmlIjl+d2sSr7Cw gIxO3nbNyHXY+c6pEOV0FRyLensQEiwOQthquRcL2xxbzZwChn6IFDGyh6PNl7mZ ml1NpmzDWWsTYe9RTh4PrpJ13nbaABnOwftLr+UKCLdt7uSi2f4viEqhlgkHc3qB dN0C8p6Qe6ihJjFetglMtORTP1ozOgxpMGiTCrl/iMCGZIjsjidP0a3HqpwK1gD8 1X50Yrqnp8doWBDySkY2qlQYH2KCHwHXghvL5N7eAL88RRZ5Cq+7jbHgxFLPecMx k7ohP8o8iWUMTeKzKwMTLRcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 135630292945215227643456707189530999457 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte DV SSL SHA256 CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-01 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.lonelyplanet.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 843280762980629027125644656542176488784462355458991478484255915138778844156014397683762988111163952634065118362161509496079243146132274504597450999591246062775734952794585594980476156172418430953264206571979447028000668323576584692341374090903849425383964657520975354014890315402487972647278628066809035099537642196900194377610292107556044163402189574015016558875316799849970550701904992932801498162374766004160499977822395291229228017440189455155840031840518834606855255539767338423553433761418299833435347387033192878348410430745135104427956396837064255270678290935125301961616824283765769796252382519056785965384285605991556517648313996264891633503693280149291819631557533982509831078343968291031040723995552195113439448157390433728131219700108888405930779676084806647345385168425494374073856879505269164159161302280198107135682034661897014566160745803135945969003107002878715591186194651889002211326521612066784998334112703793412754792149281804154138252779572695432865699201688284768333862469712419105087101601196359170964123457665666209211814648211945137220327434674440827246759532492835239191790739613160138579094085092923007782644926212987812760442695816079556722776348780156371313715364207233351824755377960877757716577332503 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lonelyplanet.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lonelyplanet.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tm.symcb.com/tm.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7d29312fc11e6eae31056ab3eb1ccda9ddae809a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tm.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tm.symcb.com/tm.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 008ab727d03a8770987df2ec15ee45e22bffcf67096157380277988e0c311d71c707dbb49ac827820a6222ddd5eb446752c0ad0b30348b4308fefe41ad2da913aa9275c4d924793fe9da5bc9739376b3af65e93b59f0a51a2115cca5dd3ebb9ae2fed38d577be64055f4c71f34089211d35e43eff1460f9be4aec6ef09b033cb68e7e7feb4ed05b9afe6686a2446270924f3d7a6da819e31b36612d294e27ef79c316b29d7eb55f72730ebde52a52a0abaa286dc0be074caf30e57add1cee095f40207149cb5a2ab9ef9f3eb4be2f94251806ea06e33abb60f7ab36faea2827864b82e1d2adbf393bdf8b63b14abb64a7c960bff151dad2ba733d709e7a2efe84f