mail2.gloria-jeans.ru

- Gloria Jeans -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 76:2e:a1:03:6d:9f:5b:ea:53:b4:dc:b9:ee:a2:5f:93 was issued on by GeoTrust Inc..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Gloria Jeans

Organization: Gloria Jeans
Organization unit: IT
State / Province: Rostovskaya obl.
Locality: Rostov-Na-Donu
Country: RU

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 76:2e:a1:03:6d:9f:5b:ea:53:b4:dc:b9:ee:a2:5f:93
Serial Number (int): 157091014897669869869057985639929241491
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): c5:20:ff:0e:af:4c:69:fd:2d:1c:cf:af:64:44:1d:2d:9e:7b:50:05
Fingerprint (sha256): 00:80:8c:6a:17:a0:aa:51:e2:f8:ee:2b:3e:2c:3e:fc:af:bd:17:26:4f:d2:77:29:41:6a:fe:a4:f3:51:f3:fe

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate mail2.gloria-jeans.ru

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail2.gloria-jeans.ru

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.gloria-jeans.ru
mail1.gloria-jeans.ru
mail3.gloria-jeans.ru
autodiscover.gloria-jeans.ru
mail2.gloria-jeans.ru

Other certificates including the domain name gloria-jeans.ru

(limited to 100 certificates)
omg.gloria-jeans.ru
mail2.gloria-jeans.ru
cc-main-master.preprod.gloria-jeans.ru
pim-master.gs.gloria-jeans.ru
lookbook.gloria-jeans.ru
*.gloria-jeans.ru
admin-auth-master.preprod.gloria-jeans.ru
bu-master.gs.gloria-jeans.ru
lookbook.gloria-jeans.ru
lookbook.gloria-jeans.ru
omg.gloria-jeans.ru
test.oms.gloria-jeans.ru
api-test.oms.gloria-jeans.ru
logs.new.gloria-jeans.ru
*.gloria-jeans.ru
storage-cdn3.gloria-jeans.ru
feed-master.preprod.gloria-jeans.ru
sccm.gloria-jeans.ru
admin-gui-frontend-preprod-test.preprod.gloria-jeans.ru
lookbook.gloria-jeans.ru
gloria-jeans.ru
pim-dev.gs.gloria-jeans.ru
admin-gui-backend-master.gs.gloria-jeans.ru
jenkins.gs.gloria-jeans.ru
customer-gui-asm-master.preprod.gloria-jeans.ru
clicks.gloria-jeans.ru
front-stage.preprod.gloria-jeans.ru
kibana.new.gloria-jeans.ru
omg.gloria-jeans.ru
audit-master.preprod.gloria-jeans.ru
storage-cdn3.gloria-jeans.ru
clicks.gloria-jeans.ru
blog.gloria-jeans.ru
eoiqpm.gloria-jeans.ru
customers-master.preprod.gloria-jeans.ru
jenkins.oms.gloria-jeans.ru
help.gloria-jeans.ru
help.gloria-jeans.ru
api.outfit.gloria-jeans.ru
gloria-jeans.ru
omg.gloria-jeans.ru
sccm.gloria-jeans.ru
eoiqpm.gloria-jeans.ru
blog.gloria-jeans.ru
clicks.gloria-jeans.ru
admin-gui-backend-master.preprod.gloria-jeans.ru
es-public.gs.gloria-jeans.ru
offers-dev.gs.gloria-jeans.ru
omg.gloria-jeans.ru
cms-master.preprod.gloria-jeans.ru
clicks.gloria-jeans.ru
integration-oms.preprod.gloria-jeans.ru
cdn-adapter-task-97154.preprod.gloria-jeans.ru
clicks.gloria-jeans.ru
admin-gui-backend-master.preprod.gloria-jeans.ru
admin-gui-frontend-master.preprod.gloria-jeans.ru
lookbook.gloria-jeans.ru
help.gloria-jeans.ru
lookbook.gloria-jeans.ru
logs.new.gloria-jeans.ru
info.gloria-jeans.ru
front-test.front.gloria-jeans.ru
lookbook.gloria-jeans.ru
omg.gloria-jeans.ru
info.gloria-jeans.ru
front-test.front.gloria-jeans.ru
camunda-test.oms.gloria-jeans.ru
eoiqpm.gloria-jeans.ru
cc-main-master.gs.gloria-jeans.ru
offers-feature.gs.gloria-jeans.ru
storage-cdn2.gloria-jeans.ru
clicks.gloria-jeans.ru
ensi-connector-master.preprod.gloria-jeans.ru
webapi-connector-task-97154.preprod.gloria-jeans.ru
*.gloria-jeans.ru
customer-gui-mob-master.gs.gloria-jeans.ru
lookbook.gloria-jeans.ru
cc-main-master.preprod.gloria-jeans.ru
*.gloria-jeans.ru
storage-cdn6.gloria-jeans.ru
integration-oms.preprod.gloria-jeans.ru
front-test.front.gloria-jeans.ru
1mln.gloria-jeans.ru
info.gloria-jeans.ru
blog.gloria-jeans.ru
pim-master.preprod.gloria-jeans.ru
es-public.preprod.gloria-jeans.ru
admin-gui-frontend-preprod-test.preprod.gloria-jeans.ru
api-asm.new.gloria-jeans.ru
eoiqpm.gloria-jeans.ru
clicks.gloria-jeans.ru
admin-gui-frontend-task-103284-uat.preprod.gloria-jeans.ru
front-kz-test.front.gloria-jeans.ru
blog.gloria-jeans.ru
ensi-connector-task-99623.gs.gloria-jeans.ru
admin-auth-master.gs.gloria-jeans.ru
bu-dev.gs.gloria-jeans.ru
customer-gui-asm-master.preprod.gloria-jeans.ru
oms.preprod.gloria-jeans.ru
help.gloria-jeans.ru

Certificate

The complete raw certificate details for mail2.gloria-jeans.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd50d+Uy/ddR/8lFd00x
wfXGc4lfc/lZJjR1CA8pgN1rl+DUY8BzOhaSM0O6VJgrPAmViqRyfRsVrEPCFy0a
4dyPWpRxbgOXMeFEORXr4qgEDVFYExueJWSgmMsIMXYhF6l8BuEpHPgC6K0dD+Qy
TKSM02IIkHlcrmsuhgudHb38QsUeTFf/76WiC3XPDIB3FgVcUybVNYw4ofl6MMyv
OfIuohv8lQIHVWYC7R4wrdtypj74QvNohiJCqJ1LUvNm/LJZeIRmAENFjS76NGtl
fLJYDkBQk5ffyUkCdaF4PSQLBb0SmU0FLKVMHnoBYhcdhQD3uMGgoykepPEv9L9b
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 157091014897669869869057985639929241491
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rostovskaya obl.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rostov-Na-Donu'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gloria Jeans'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail2.gloria-jeans.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22958829825348731917362375959409783071038313802211142239116968058845534466244291693453575160683808354831901586114572846614187646123190706169460277497277340076663333633118732212602281277664190151189784142172506544035676577936963532121823803780920464221422895437976001122343159848832591906144407773862703389748479893937031046498098199026364124177090577805738585654428366943346492135231601288868741350459865186371073400736711188072843540548433359470617853476848671701100492190226159304163831765953740695422568610932221948761563851514554726838893408881426825136398073422307281271225726651660159825030636634903991780596689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gloria-jeans.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail1.gloria-jeans.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail3.gloria-jeans.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gloria-jeans.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail2.gloria-jeans.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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