secure-cert1.ecnp.fiabusinesscard.com

- FIA Card Services -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 5e:41:62:b8:eb:87:22:10:59:5d:e5:31:84:10:6b:b5 was issued on by Symantec Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

FIA Card Services

Organization: FIA Card Services
Organization unit: Network Services
State / Province: North Carolina
Locality: Charlotte
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5e:41:62:b8:eb:87:22:10:59:5d:e5:31:84:10:6b:b5
Serial Number (int): 125286933226602259492863953849705065397
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 8b:56:72:37:79:2b:c5:72:d6:55:be:d5:71:99:4b:0a:3b:a0:67:a3
Fingerprint (sha256): 00:18:95:86:e7:5c:13:88:7c:03:05:fb:5e:4c:3e:0e:45:1c:26:5c:9b:9c:03:cc:07:a2:20:4b:d9:17:6c:ad

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate secure-cert1.ecnp.fiabusinesscard.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure-cert1.ecnp.fiabusinesscard.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

signin-cert1.ecnp.fiabusinesscard.com
secure-cert1.ecnp.fiabusinesscard.com

Other certificates including the domain name fiabusinesscard.com

(limited to 100 certificates)
secure-cert1.ecnp.fiabusinesscard.com
citsignin3.fiabusinesscard.com
pssitwww.fiabusinesscard.com
sitwww7.fiabusinesscard.com
epass-uat.bankofamerica.com
sitwww1.fiabusinesscard.com
fiabusinesscard.com
secure-dev5.ecnp.fiabusinesscard.com
secure-devps.ecnp.fiabusinesscard.com
devwww4.fiabusinesscard.com
secure-dev2.ecnp.fiabusinesscard.com
ddoxlogin.dynamicdox.com
citwww5.fiabusinesscard.com
pssitsignin.fiabusinesscard.com
devwww1.fiabusinesscard.com
signin.fiabusinesscard.com
signin-dev1.ecnp.fiabusinesscard.com
signin-cert1.ecnp.fiabusinesscard.com
signin-devflex1.ecnp.fiabusinesscard.com
sitwww4.fiabusinesscard.com
signin.fiabusinesscard.com
devwww3.fiabusinesscard.com
devsignin2.fiabusinesscard.com
sbmyreportcenter.fiabusinesscard.com
ddoxlogin.dynamicdox.com
sitsignin6.fiabusinesscard.com
epass-uat.bankofamerica.com
signin-dev3.ecnp.fiabusinesscard.com
signin-dev5.ecnp.fiabusinesscard.com
citwww6.fiabusinesscard.com
signin.fiabusinesscard.com
secure-pt2.ecnp.fiabusinesscard.com
ddoxlogin-uat.bankofamerica.com
sitsignin2.fiabusinesscard.com
secure-dev3.ecnp.fiabusinesscard.com
sitsignin5.fiabusinesscard.com
citwww4.fiabusinesscard.com
citwww1.fiabusinesscard.com
sitwww4.fiabusinesscard.com
citsignin1.fiabusinesscard.com
citwww2.fiabusinesscard.com
ddoxlogin.dynamicdox.com
fedsso-sit.bankofamerica.com
citsignin5.fiabusinesscard.com
sitwww6.fiabusinesscard.com
sbmyreportcenter.fiabusinesscard.com
signin-cert2.ecnp.fiabusinesscard.com
signin-dev2.ecnp.fiabusinesscard.com
ddoxlogin.dynamicdox.com
ddoxlogin-uat-ah.dynamicdox.com
secure.fiabusinesscard.com
signin-cert1.fiabusinesscard.com
sitwww4.fiabusinesscard.com
www.fiabusinesscard.com
fiabusinesscard.com
signin-sit5.fiabusinesscard.com
signin-cert2.ecnp.fiabusinesscard.com
epass-uat.bankofamerica.com
signin-dev1.ecnp.fiabusinesscard.com
citwww1.fiabusinesscard.com
sitsignin6.fiabusinesscard.com
signin-review1.ecnp.fiabusinesscard.com
sitwww5.fiabusinesscard.com
epass-uat.bankofamerica.com
fedsso-ecomm.bankofamerica.com
fiabusinesscard.com
sitsignin4.fiabusinesscard.com
epass-uat.bankofamerica.com
devsignin3.fiabusinesscard.com
ddoxlogin-dr.bankofamerica.com
citwww6.fiabusinesscard.com
devwww2.fiabusinesscard.com
secure-devflex1.ecnp.fiabusinesscard.com
pssitwww.fiabusinesscard.com
secure-preview2.ecnp.fiabusinesscard.com
signin-dev5.ecnp.fiabusinesscard.com
sitwww1.fiabusinesscard.com
tstsignina.fiabusinesscard.com
secure-dev3.ecnp.fiabusinesscard.com
signin-qaps.ecnp.fiabusinesscard.com
signin-dev2.ecnp.fiabusinesscard.com
secure-review1.ecnp.fiabusinesscard.com
citsignin1.fiabusinesscard.com
devwww3.fiabusinesscard.com
citsignin3.fiabusinesscard.com
signin-dev3.ecnp.fiabusinesscard.com
signin-pssit.fiabusinesscard.com
sitwww6.fiabusinesscard.com
signin-sit2.fiabusinesscard.com
sitsignin5.fiabusinesscard.com
sitwww6.fiabusinesscard.com
ddoxlogin.dynamicdox.com
sitsignin2.fiabusinesscard.com
secure-dev1.ecnp.fiabusinesscard.com
citsignin2.fiabusinesscard.com
sitwww2.fiabusinesscard.com
sitwww2.fiabusinesscard.com
sitsignin7.fiabusinesscard.com
fedsso-pp.fiabusinesscard.com
sitsignin4.fiabusinesscard.com

Certificate

The complete raw certificate details for secure-cert1.ecnp.fiabusinesscard.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEIfyuq9YuBOHHhdveW0
fI9ugIyoS0aTGR32KNpRld0VkUouXeP3wEL336Z/U/H11xixf0l8VTZ7Z273GmQg
PXPKQrFQhL9h7PsdpcV6aGVnXYewa/W0d6uI3P4puilVsgV8vRdOuGKxghreoNQ5
TcRQqXJv2+Ej9+gC+1K48IswdpeQv1HV+dnFgxDQ/4v2fUxuOxT/WW1+sjuP6OS5
xF2ESS5ff0ZMEpH+s9x1m16j8BEZZ3Mln2Zw/OF1wkM75TY/ObCRTbcsLc1Ha6bV
g7MXbi/XJ71CYkic7o5DtNEeKrFKCZmXkDzWeQBGf2+ZaVfN+Y5ShkNcexz4yPle
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 125286933226602259492863953849705065397
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Charlotte'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'FIA Card Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Network Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'secure-cert1.ecnp.fiabusinesscard.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25785221266454850245909043519493740558915768982632581227020366556974701140972194752114886567144087320340909236197854138407644620587731690454928991334777455866410909425325047970092664805383326224448937831949261602813178818446282923310868654694221154021431816922966219040805279742054345756167447846444611477914353131593539378944984652254149350530314873367913758707070084724190466735775674767692530190607623157467169911611171044412088940254766903875571085371084680337136668931469051142261507803133425168375716290802149130894635705083223926506968277666987725698088119282847589413071686564973316560992339861093078181436989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin-cert1.ecnp.fiabusinesscard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-cert1.ecnp.fiabusinesscard.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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