*.atlassian.io

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:82:e9:32:23:43:0b:4e:b1:aa:59:94:87:52:93:a3 was issued on by Amazon.

With 27 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.atlassian.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:82:e9:32:23:43:0b:4e:b1:aa:59:94:87:52:93:a3
Serial Number (int): 19288920306357153136128673014200046499
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 40:64:cf:0b:c1:1e:f1:04:ff:35:8e:19:43:fa:99:89:dd:02:26:b1
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 60:e1:cb:81:a5:e5:d7:2c:64:21:54:8b:12:90:50:f8:31:4e:25:c7
Fingerprint (sha256): 00:f9:62:c0:0e:39:82:98:6c:05:b0:b9:d0:c5:60:d0:93:1a:e4:ec:c1:73:cb:1a:3b:1a:92:68:ac:c2:d6:e7

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.atlassian.io

27

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.atlassian.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.atlassian.io
*.internal.atlassian.io
*.useast.atlassian.io
*.internal.useast.atlassian.io
*.uswest.atlassian.io
*.internal.uswest.atlassian.io
*.uswest2.atlassian.io
*.internal.uswest2.atlassian.io
*.euwest.atlassian.io
*.euwest-beta.atlassian.io
*.internal.euwest.atlassian.io
*.internal.euwest-beta.atlassian.io
*.atl-paas.net
*.prod.atl-paas.net
*.prod.public.atl-paas.net
*.us-east-1.prod.atl-paas.net
*.us-east-1.prod.public.atl-paas.net
*.us-west-1.prod.atl-paas.net
*.us-west-1.prod.public.atl-paas.net
*.us-west-2.prod.atl-paas.net
*.us-west-2.prod.public.atl-paas.net
*.eu-west-1.prod.atl-paas.net
*.eu-west-1.prod.public.atl-paas.net
*.eu-west-1-beta.prod.atl-paas.net
*.eu-west-1-beta.prod.public.atl-paas.net
*.atlassian.com
*.internal.atlassian.com

Other certificates including the domain name atlassian.io

(limited to 100 certificates)
*.staging.atlassian.io
*.atlassian.io
*.staging.atl-paas.net
*.staging.atl-paas.net
*.staging.atlassian.io
*.staging.atl-paas.net
*.atl-paas.net
*.dev.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.staging.atlassian.io
*.staging.atl-paas.net
*.staging.atlassian.io
*.atl-paas.net
*.staging.atl-paas.net
*.staging.atlassian.io
*.dev.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.dev.atl-paas.net
*.atl-paas.net
*.staging.atlassian.io
*.staging.atl-paas.net
*.atlassian.io
*.atl-paas.net
*.dev.atl-paas.net
*.staging.atl-paas.net
*.dev.atl-paas.net
*.staging.atlassian.io
*.staging.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.staging.atl-paas.net
*.staging.atl-paas.net
*.csp.paas-inf.net
*.staging.atl-paas.net
*.atlassian.io
*.atl-paas.net
*.staging.atl-paas.net
*.staging.atlassian.io
*.staging.atlassian.io
*.atl-paas.net
*.atlassian.io
*.staging.atlassian.io
*.atl-paas.net
*.staging.atl-paas.net
*.staging.atlassian.io
*.staging.atlassian.io
*.dev.atl-paas.net
*.staging.atl-paas.net
*.staging.atl-paas.net
*.atl-paas.net
*.dev.atlassian.io
*.staging.atl-paas.net
*.atl-paas.net
*.staging.atl-paas.net
*.atl-paas.net
*.dev.atl-paas.net
*.staging.atlassian.io
*.staging.atl-paas.net
*.atlassian.io
*.atl-paas.net
*.staging.atl-paas.net
*.atl-paas.net
*.dev.atlassian.io
*.staging.atl-paas.net
*.staging.atlassian.io
*.atlassian.io
*.staging.atl-paas.net
*.atl-paas.net
*.dev.atl-paas.net
*.dev.atlassian.io
*.atl-paas.net
foos.platform.dev.atlassian.io
*.atl-paas.net
*.dev.atl-paas.net
*.dev.atlassian.io
*.staging.atlassian.io
*.staging.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atlassian.io
*.csp.paas-inf.net
*.atl-paas.net
*.atl-paas.net
*.staging.atlassian.io
*.atlassian.io
*.atl-paas.net
*.dev.atl-paas.net
*.staging.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net

Certificate

The complete raw certificate details for *.atlassian.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fCy5K9AsrO3aVBK/Vgm
S6HMmlg7xee3LzMWZ7/Km9RpFJs0EsNV+oINR28Cw8RJRT1vaspNrn57OVvhOpjN
mFS8nlBc6l1ikbJwjtyBd9wrJjJUMo/1vuqNWkhO2Ylhj7aeR2jfcgwuJ5fR/5zP
nI4NtvQna6YCTIqdMkYej2fM0NNEG38rpoYIFdJSOpvqrjLMsGWisl8dwcDaqKom
3pHeAGNvHhzSdSrkfaWstzTZC+zK/pzDvAxCUvQqELx9+6Fef3T6RUviplwDnWso
cUfaQhLk4JzvtLWwcCcbgE12MCl+8vfILtsJNOdvwYBQkbkTvDGgxDz46jDJC0SF
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19288920306357153136128673014200046499
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.atlassian.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26502498740896492771799871568060626537859723924196931678408552928563678026867297898993587208054986901817232807069563966272192298615358637026581650473170774079231859577946235760729557664822786381360622396845169270609431074594761732427706440980491283382473539701252458559329670889424405136652605901628933379081412206917992343795007620382475549057141929048774917280159162998944738953948824682171623252235969400311202658142591648212993281466971632501383502795129252412514754279888066732866980083898108721233669413258719214663096320160665260562791504528384358752931518191801865744380085524327905589524059976394167367796133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4064cf0bc11ef104ff358e1943fa9989dd0226b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (795 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.useast.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.useast.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uswest.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.uswest.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uswest2.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.uswest2.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euwest.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euwest-beta.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.euwest.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.euwest-beta.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-east-1.prod.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-east-1.prod.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-1.prod.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-1.prod.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-2.prod.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-2.prod.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-west-1.prod.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-west-1.prod.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-west-1-beta.prod.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-west-1-beta.prod.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlassian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.atlassian.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00355be50f3d1e2d7d9b9e0a39d1d53a0bd534ce1d14b8b023ceaed4cbeb4272bf470e57b8dd633185582e01350adffa9bfa13822226cae64eab8c6bac5dd6ba244a237c7c8d4416d1a4791ee15988d345b7376d406ac1653ec62a756ad56da990ebff8bcbe340ca0f9230682c0ee116b834b47af04e5445e8580cbb4d3b46cdc2b0de2779dade5f9ecc3ee6e85559d4da54d340f7998528934352577c3aeed689e04920917575615f3249f22062e2beb20e60d94001c21ee3767e504f88580de8a01abfbd62e712d707084e37323d77c8b5eb2515dfb36a8351cd4cf396dea936c9f3de1bd86fce8ca5d1c5f4426a037611c980a244f8b28f7079c60975e23cd4