fp-francotyp.at

Issued by Amazon

About this certificate

This digital certificate with serial number 09:e9:15:6d:cd:a6:64:ea:5b:19:65:70:2a:f2:bc:ee was issued on by Amazon.

With 43 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fp-francotyp.at

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:e9:15:6d:cd:a6:64:ea:5b:19:65:70:2a:f2:bc:ee
Serial Number (int): 13173291760219833692656126984237268206
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b7:2c:ae:25:11:ac:ab:6f:07:7c:4a:ab:4c:28:c7:22:62:ca:31:7b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 74:97:aa:c9:08:d9:1f:ca:8f:03:06:b5:a2:27:4d:78:20:89:bf:ca
Fingerprint (sha256): c9:07:2c:9c:0d:be:33:15:55:41:b9:85:35:f1:1a:3a:95:95:e5:34:44:c3:ac:ee:e6:fa:2e:fc:5b:78:4f:9a

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate fp-francotyp.at

43

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fp-francotyp.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fp-francotyp.at
freesort.de
fp-sign.at
*.fp-francotyp.com
*.mentana-claimsoft.de
mentana-claimsoft.de
*.fp-sign.nl
*.freesort.de
*.fp-ruys.nl
*.fp-sign.fr
*.fp-sign.de
fp-sign.us
internet-access.de
fp-sign.it
*.fp-sign.se
francotyp.de
fp-sign.se
fp-francotyp.com
*.fp-sign.co.uk
*.fp-sign.at
*.fp-sign.it
*.fp-francotyp.at
fp-sign.co.uk
fp-sign.be
inovolabs.com
*.fp-sign.com
fp-ruys.nl
*.fp-sign.us
fp-sign.de
fp-sign.fr
*.fp-dam.com
fp-sign.nl
fp-dam.com
fp-sign.com
francotyp-postalia.de
*.fp-sign.be
*.infopark.io
*.francotyp.de
*.internet-access.de
*.francotyp-postalia.de
fp-francotyp.fr
*.inovolabs.com
*.fp-francotyp.fr

Other certificates including the domain name fp-francotyp.at

(limited to 100 certificates)
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at
fp-francotyp.at

Certificate

The complete raw certificate details for fp-francotyp.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti5Yv4yc2V97+omVBvie
hnadfqJO8WU36ywAdUYfOsGGnd68Ozq0ztpuX7sH3twf3gKEbbdV7G0ewSzqOLHo
iNDyAHyQJkA3UuAGND50EFiI864Bxf1wVmDTNnJTg6jy/HXMezBldHpAeFNaQSpj
b+zukkinWVPrCTGEeBY0Wza3NZ9GFRDs4sikC5VomOnst9cofWIjsjFjyu5AdKZr
6vTYMlVr7+tiInKQvtBmiHyOJ5sMfBWX5DIfWkdoGKn3g49FuVv1S8O/X+upJTkV
yG04pgHqIVdwOWILS+XpNmLA1bIYeNZCCvs0hR1oMv5b8Xklh+k41SiJq/92Wm8E
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13173291760219833692656126984237268206
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fp-francotyp.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22998225899980231088329495451040258461781517376533622725447979621155723355286234178946411809735634539372373469494858235391254331498141600973398811980905341026574807038572394759112337966109893809712067312605038109951804087383621301835761161963366154842313828424820369350152138893353571264652889893957211232741901054419995611063531010506729304794294999585078806317040424937666318116277758926706277671573864539210726336460505166855827000616163043237803052446111508051113161507182869005453279864114901287807786707922808723006428211721891607690661154373917915181109122866308822441354783066207052094272121145587166585226333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b72cae2511acab6f077c4aab4c28c72262ca317b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (675 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-francotyp.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freesort.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-sign.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-francotyp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mentana-claimsoft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mentana-claimsoft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-sign.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freesort.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-ruys.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-sign.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-sign.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-sign.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internet-access.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-sign.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-sign.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'francotyp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-sign.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-francotyp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-sign.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-sign.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-sign.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-francotyp.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-sign.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-sign.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inovolabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-sign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-ruys.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-sign.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-sign.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-sign.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-dam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-sign.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-dam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-sign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'francotyp-postalia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-sign.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infopark.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.francotyp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internet-access.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.francotyp-postalia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-francotyp.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inovolabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-francotyp.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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