xadmin.exchange.ionos.eu

- 1&1 IONOS SE -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 08:f5:e4:bb:58:89:50:5f:61:7c:3e:8d:53:02:e5:6e was issued on by DigiCert Inc.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

1&1 IONOS SE

Organization: 1&1 IONOS SE
Organization unit: IT
State / Province: Rheinland-Pfalz
Locality: Montabaur
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:f5:e4:bb:58:89:50:5f:61:7c:3e:8d:53:02:e5:6e
Serial Number (int): 11910575929077065750857663163148723566
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c6:dc:b1:7d:14:bc:7e:4e:d8:35:95:8a:ce:36:5e:e0:9b:69:1e:cd
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): d8:3c:4e:40:6b:c0:24:bf:59:79:0a:e6:ca:68:24:dd:13:f3:0b:ae
Fingerprint (sha256): e2:57:8e:39:bb:6f:bc:2b:d0:d0:f5:cc:4a:9e:fe:50:98:26:fd:f1:18:35:a8:69:49:39:50:c9:be:21:f6:bb

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate xadmin.exchange.ionos.eu

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xadmin.exchange.ionos.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xadmin.exchange.ionos.eu
xadmin.1.exchange.1and1.co.uk
xadmin.exchange.1and1.co.uk
xadmin.exchange.1and1.fr
xadmin.exchange.1and1.eu
xadmin.1.exchange.1and1.fr
xadmin.1.exchange.1and1.es
xadmin.exchange.1and1.es
xadmin.exchange.1and1.pl
xadmin.exchange.1and1.it
xadmin.1.exchange.1and1.eu
xadmin.profimailer.de
xadmin.1.exchange.1and1.it
xadmin.1.exchange.1and1.pl
xadmin.1.profimailer.de
xadmin.exchange.ionos.co.uk
xadmin.exchange.ionos.es
xadmin.exchange.ionos.fr
xadmin.exchange.ionos.de

Other certificates including the domain name ionos.eu

(limited to 100 certificates)
exchange2019.ionos.eu
ionos.eu
ionos.de
exchange2019.ionos.eu
xadmin.exchange.ionos.eu
ionos.de
1.exchange.1and1.eu
1.exchange.1and1.eu
xadmin.exchange.ionos.eu
xadmin.exchange.ionos.eu
1.exchange.1and1.eu
ionos.eu
1.exchange.1and1.eu
ionos.de
1.exchange.1and1.eu
exchange2019.ionos.eu
1.exchange.1and1.eu
smtp.ionos.de
ionos.de
exchange2019.ionos.eu
ionos.de
xadmin.exchange.ionos.eu
ionos.eu
1.exchange.1and1.eu
xadmin.exchange.ionos.eu
1.exchange.1and1.eu
1.exchange.1and1.eu
ionos.de
xadmin.exchange2019.ionos.eu
Exchange.Ionos.eu
xadmin.exchange.ionos.eu
Exchange.Ionos.eu
ionos.de
xadmin.exchange.ionos.eu
Exchange2019.ionos.eu
xadmin.exchange.ionos.eu
xadmin.exchange.ionos.eu
ionos.de
xadmin.exchange2019.ionos.eu

Certificate

The complete raw certificate details for xadmin.exchange.ionos.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnenubRNavCqnL6EpkXiw
CCz0CF97Moc7m2BgMHYVFU8IKVbUg6F93G8558msMtm6bB4W+3iVYaFSahywb/e2
cb+uIwk88jgi/LPnVKnmbw/lRmYmNGsMqRwGXTZhysYKJRcX2/9o596dHTdfqRE1
iAAop8cYH+pBU/di9cP8VmTzI1SsVBQ/qbuCrQBTewdOFShOKia9K5GBMgdXM6lx
5YlU4e9z16ZBbM7guf5PdiHDVuARuejaor4DOVxASrXZWIChwIh3YMx/jFbtZSrf
IAzXQiItta8fjaMtqtYasBfQAHFY96Ww0wGX9T0rJOV2eZeH30oUZz0R33ImmKFv
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11910575929077065750857663163148723566
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rheinland-Pfalz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montabaur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '1&1 IONOS SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xadmin.exchange.ionos.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19934769728645538845024173052559996449459388798197014164273176796229815618492325145166162024406128086194161213641575832863062334118830555279405046316258758699228302363318617394682784842474510505527982544097438188628657589441210482214948510271732208694273722323898287320590451240764054747199712115776565347106038117512391425114002466467290520335715071343970807120622270417747242418629541197420957479419661444692001062243934696279150209395798141697828344010496883195645014770675572678853588677404184655718089307129130328336147252054308185761304400776389516663276339245483941628896333764686468679788451496629163440304117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6dcb17d14bc7e4ed835958ace365ee09b691ecd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (515 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xadmin.exchange.ionos.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xadmin.1.exchange.1and1.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xadmin.exchange.1and1.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xadmin.exchange.1and1.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xadmin.exchange.1and1.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xadmin.1.exchange.1and1.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xadmin.1.exchange.1and1.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xadmin.exchange.1and1.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xadmin.exchange.1and1.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xadmin.exchange.1and1.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xadmin.1.exchange.1and1.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xadmin.profimailer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xadmin.1.exchange.1and1.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xadmin.1.exchange.1and1.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xadmin.1.profimailer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xadmin.exchange.ionos.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xadmin.exchange.ionos.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xadmin.exchange.ionos.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xadmin.exchange.ionos.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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