plmpdms.jpl.nasa.gov

- NASA Jet Propulsion Laboratory -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 04:52:ab:59:92:b0:8a:fa:3e:65:42:26:7a:c6:65:b2 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

NASA Jet Propulsion Laboratory

Organization: NASA Jet Propulsion Laboratory
Organization unit: OCIO
State / Province: California
Locality: Pasadena
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:52:ab:59:92:b0:8a:fa:3e:65:42:26:7a:c6:65:b2
Serial Number (int): 5746155714286446243248551488527951282
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 19:d1:c0:57:e6:91:50:2c:56:de:52:08:0f:58:65:ce:46:6f:e1:7a
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 58:c6:96:c7:b2:47:10:9c:d3:3f:0b:c5:84:98:6a:9b:87:21:fb:68
Fingerprint (sha256): 00:e9:22:a9:c6:bb:3f:27:80:ad:1c:c8:8a:cd:6a:7f:85:fc:94:a9:ef:5d:6b:f2:82:18:cb:fd:82:36:9c:d5

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate plmpdms.jpl.nasa.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for plmpdms.jpl.nasa.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

plmpdms.jpl.nasa.gov

Other certificates including the domain name nasa.gov

(limited to 100 certificates)
*.jpl.nasa.gov
*.jpl.nasa.gov
*.jpl.nasa.gov
sma.gsfc.nasa.gov
*.jpl.nasa.gov
maptis.ndc.nasa.gov
*.jpl.nasa.gov
nirps-staging.msfc.nasa.gov
plop.nascom.nasa.gov
grin.hq.nasa.gov
*.jpl.nasa.gov
*.jpl.nasa.gov
*.jpl.nasa.gov
lrp.at.nasa.gov
spacecomm.nasa.gov
www-gsfc.edn.gsfc.nasa.gov
science.hq.nasa.gov
server-mpo.arc.nasa.gov
*.jpl.nasa.gov
*.fltops.jpl.nasa.gov
step.nasa.gov
ensight.eosdis.nasa.gov
photonics.gsfc.nasa.gov
education.jsc.nasa.gov
AntiSpam.ndc.nasa.gov
cptrace.nasa.gov
msfcvpn.nasa.gov
sip.jpl.nasa.gov
omisips2.omisips.eosdis.nasa.gov
*.jpl.nasa.gov
nai-ar.ndc.nasa.gov
code.luna.nasa.gov
atfi.hq.nasa.gov
veritas.ndc.nasa.gov
handbook.appdat.jsc.nasa.gov
*.jpl.nasa.gov
stereo-ssc.nascom.nasa.gov
*.dip.amesaero.nasa.gov
monitoring.eva.appdat.jsc.nasa.gov
*.jpl.nasa.gov
straw.nasa.gov
code541.gsfc.nasa.gov
*.jpl.nasa.gov
nescacademy.larc.nasa.gov
ecc.earthdata.nasa.gov
*.jpl.nasa.gov
cptrace.nasa.gov
corrosion.ksc.nasa.gov
minx-docs.arc.nasa.gov
omisips1.omisips.eosdis.nasa.gov
ceres-wg.larc.nasa.gov
*.jpl.nasa.gov
supplychain1.gsfc.nasa.gov
aerocenter.gsfc.nasa.gov
*.jpl.nasa.gov
search.earthdata.nasa.gov
docserver.gesdisc.eosdis.nasa.gov
xanth.nsstc.nasa.gov
science.wff.nasa.gov
dashboard.sandbox.lpdaac.earthdata.nasa.gov
*.jpl.nasa.gov
*.jpl.nasa.gov
istd.gsfc.nasa.gov
uat.earthdata.nasa.gov
*.hq.nasa.gov
sra.jsc.nasa.gov
gs6102dsc-web2.gesdisc.eosdis.nasa.gov
*.jpl.nasa.gov
cxfmea-cil.nasa.gov
openhouse.larc.nasa.gov
*.jpl.nasa.gov
femci.gsfc.nasa.gov
*.jpl.nasa.gov
vso1.nascom.nasa.gov
urap.gsfc.nasa.gov
*.mdscc.nasa.gov
lance4.modaps.eosdis.nasa.gov
*.jpl.nasa.gov
fcportal.nsstc.nasa.gov
*.nccs.nasa.gov
*.jpl.nasa.gov
*.jpl.nasa.gov
*.jpl.nasa.gov
sfa.staging.ird.appdat.jsc.nasa.gov
omisips1.omisips.eosdis.nasa.gov
lacerta.gsfc.nasa.gov
developer.sit.earthdata.nasa.gov
sta3cd-map.larc.nasa.gov
iris.production.appdat.jsc.nasa.gov
ozoneaq.gpc.gsfc.nasa.gov
s3-test.kzebdi.ngap.sit.earthdata.nasa.gov
plmpdms.jpl.nasa.gov
*.homeandcity.nasa.gov
*.jpl.nasa.gov
HumanResearchWiki.jsc.nasa.gov
discovery.larc.nasa.gov
*.jpl.nasa.gov
cmr.earthdata.nasa.gov
sohoftp.nascom.nasa.gov
rtf.nas.nasa.gov

Certificate

The complete raw certificate details for plmpdms.jpl.nasa.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeRm1E5kuZ9g5ep/YfzW
C2So5AJRR4/xMxcyLCrwVSPRgOsIPajB8z9NflD8PpJZoHAhdCIzkSO6CsDJNsvV
8G3rTquVP+o3z5whNt1vvNLa/NJTym08E7/eXgVY1QhNjG+nB32rP6UYn5jaUzUF
t7YoRwTX01Z1v753TrWqQF1FCnqfMeTlD/KZVveibLSsckRWtM5OfaQ8v/ghuMZo
3yEY1bglo/r24lh02ceS0SI5RedO3zR8MmQ49xMRxJXPzhA1IBEsF4NEgV2zepVe
OuRNofzehQ3q0FnC9IF5vLvEASeJKij1XLTZaroSzwqdJ1tgq0qUX2qaLmfvsVQw
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5746155714286446243248551488527951282
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pasadena'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NASA Jet Propulsion Laboratory'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OCIO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'plmpdms.jpl.nasa.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19427089724496096533607425511691578704445564510805612490585248896720254652279890158213108705238297934005887474749449037348065218002815763022275237878930089689377167284314784528583858098249919583651277590321246033024180628021059323987736189523796753158414682375632239820152854119437434799980765742270316686937436362672609648737483172525980191499092322012677253032190653310246190847854198197566927720205309586119236414336310369013167952515485843284845634385339336689033716476219172495463705723195500953227080472850932084840682103755253787049633288776171217045862743166364715541254068743405735784864408420965984589066361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							19d1c057e691502c56de52080f5865ce466fe17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plmpdms.jpl.nasa.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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