pvma00347.prod.fedex.com

- FedEx -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 08:af:ea:70:4b:74:d6:46:a4:e5:8a:97:dd:8e:09:65 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FedEx

Organization: FedEx
Organization unit: InfoSec
State / Province: Tennessee
Locality: Collierville
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:af:ea:70:4b:74:d6:46:a4:e5:8a:97:dd:8e:09:65
Serial Number (int): 11547230897277000927965959452697168229
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3e:19:3e:ff:36:af:01:71:8e:c1:9c:6b:8f:07:36:e3:7b:6b:81:f6
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 6d:4b:43:23:53:dd:2f:4f:0c:82:60:03:1c:aa:9b:52:2c:76:b0:39
Fingerprint (sha256): 00:86:6b:4f:62:a7:fd:d7:11:4b:dd:b1:54:cf:1f:38:90:c8:27:b3:ec:fd:bd:0f:51:39:77:4c:76:d2:1a:74

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate pvma00347.prod.fedex.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pvma00347.prod.fedex.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pvma00347.prod.fedex.com
matd-de01.prod.fedex.com
matd-d.g.fedex.com

Other certificates including the domain name fedex.com

(limited to 100 certificates)
hr-release-infobroker-services.ute.fedex.com
hrpay92vte.ute.fedex.com
sg.test.ct.fedex.com
agatha.corp.ds.fedex.com
JPTYORPBRIORC1S.corp.ds.fedex.com
ecoe90w-vip.prod.fedex.com
corp.ds.fedex.com
ibhal-uatwb.apac.fedex.com
sgta-uat01.apac.fedex.com
prh01832.prod.fedex.com
gen-lvl4-usdom-edcw06.test.cloud.fedex.com
c0004475.test.cloud.fedex.com
gen-lvl4-ic-print-edce02.test.cloud.fedex.com
www.fedex.com
plxiebb0028.emea.fedex.com
c0006171.prod.cloud.fedex.com
newpinkerton.corp.ds.fedex.com
PWN02345.fxoprod.office.fedex.com
l6-epaapi-validationservice-wtc.test.cloud.fedex.com
swift-wtc-bo.ute.fedex.com
prh22592.revprod.fedex.com
ije22151.ute.fedex.com
pwba0024.dmz.apac.fedex.com
saffr.infosec.fedex.com
ecomonitor.fxoprod.office.fedex.com
groundspotfire-prod.ground.fedex.com
swift-cntrl-bo.ute.fedex.com
pje23135.revprod.fedex.com
qptest.emea.fedex.com
www.fimos.emea.fedex.com
lotus.emea.fedex.com
fscoosqa.ute.fedex.com
asiasg-prdwb09a.apac.fedex.com
fxoice.fxoprod.office.fedex.com
gen-lvl4-ic-usdom-edce01.test.cloud.fedex.com
prh22625.revprod.fedex.com
pfwdc90.fxodmz.office.fedex.com
pvma00347.prod.fedex.com
chips.corp.ds.fedex.com
wsbase.idev.fedex.com
uwn50000.fxotest.office.fedex.com
lynctest.vpn.fedex.com
c0017700.test.cloud.fedex.com
enbebsl4.prod.fedex.com
eic-lvl3-recog-edce101.test.cloud.fedex.com
dtvxa2.prod.fedex.com
c0007974.prod.cloud.fedex.com
gen-lvl4-ic-web-edce02.test.cloud.fedex.com
ecbase1.idev.fedex.com
csi.fedex.com
eic-recog-edce01.prod.cloud.fedex.com
emm-cn-l3.prod.fedex.com
eic-prod-recog-wtc.prod.fedex.com
SGSINIDSTUDIO1S.corp.ds.fedex.com
vanity.fedex.com
getdigitalrewards.fedex.com
dxpweba2.zmd.apac.fedex.com
ujea0071.ute.apac.fedex.com
csecspu1.ute.fedex.com
cfpamst.prod.fedex.com
emars-lvl4-primary-edcw.ute.fedex.com
qrh22068.ute.fedex.com
pwba0023.dmz.apac.fedex.com
c0017715.test.cloud.fedex.com
emm-op-seg-wtc-vip.prod.fedex.com
ije00164.ute.fedex.com
gen-usadmin-edcw02.prod.cloud.fedex.com
ascstlomsua1.ute.apac.fedex.com
devinterdapp01.test.cloud.fedex.com
phlohscistage.logistics.fedex.com
www.npe.fedex.com
l6-cpg-paymentservices.prod.fedex.com
craftdmo.emea.fedex.com
ecrts-prod-jobs-edce.prod.cloud.fedex.com
emm-cn-l6.prod.fedex.com
autoverifyws4.test.cloud.fedex.com
c0022747.prod.cloud.fedex.com
wwwbeta.ec.fedex.com
cscspdvipv.ute.fedex.com
prh09002.sac.fedex.com
webdev1.infosec.fedex.com
fscoosua.ute.fedex.com
revhub1.web.fedex.com
devrebsapp01.test.cloud.fedex.com
hr-trainservices.prod.fedex.com
eje00167.ute.fedex.com
rdt.prod.fedex.com
cscspdvipv.ute.fedex.com
sfst.emea.fedex.com
erh22019.ute.fedex.com
pvma10050.prod.fedex.com
dts.test.ftn.fedex.com
conexus.prod.fedex.com
udba0006.ute.apac.fedex.com
oder.emea.fedex.com
wwwdev.idev.fedex.com
cid2.ute.fedex.com
corp-hro-dc02.corp.ds.fedex.com
oem13c.bo.apac.fedex.com
WIRELESS.WEB.FEDEX.COM

Certificate

The complete raw certificate details for pvma00347.prod.fedex.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11547230897277000927965959452697168229
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tennessee'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Collierville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FedEx'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InfoSec'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pvma00347.prod.fedex.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 831400267857475591076580999686997302786465462032172241126263501548975206381076840454149443530988134811218834126422430778421563650706825192536487988725825535666609830195773172130910794903200625691718137117411808118430456617555521088104220313240150896186484942703174480587598860880920234454543592089582218532782019842100112771158746479075798125624251163817806045758813186386655332754240740167850129650440778494004277202420224017067387217380134443798250190710542783136761454060267581542142335811903724644639162887920230106428446547353336575200740106998785639843849123334156695610797198541274418127065409645110870233046514441854401815651273458189338948314020484625601726845080724572990573244746619082308511728299333514977747972420954567949408416293891904957711353826975318788855660437718461076776762971846317683909712210929253090409302478148660060356006432670866132272149485704963938604989851704100564389197081805407558069300064361211809547996533606734775863825432606950809913922681297642462517788033140685748508086040097538348871139676487638075136496722911816544712769532868293448454684364174179913491453216366549583390257188355405308491062551588550711868144545528669582821900542452314875005643663504253530937574603428544413433784001487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e193eff36af01718ec19c6b8f0736e37b6b81f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pvma00347.prod.fedex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matd-de01.prod.fedex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matd-d.g.fedex.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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