ldap-mgmnt.corp.yahoo.com

- Yahoo Holdings, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 02:b4:80:14:84:60:64:94:4a:0f:fb:aa:e7:98:18:50 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Yahoo Holdings, Inc.

Organization: Yahoo Holdings, Inc.
State / Province: California
Locality: Sunnyvale
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:b4:80:14:84:60:64:94:4a:0f:fb:aa:e7:98:18:50
Serial Number (int): 3595667200067171565247844719747668048
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: fe:c8:9c:7c:d8:b0:1c:1c:31:04:e6:10:6a:10:32:c9:a2:b3:a2:e6
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 70:60:70:02:4a:a8:ca:50:4c:fa:5c:68:d4:83:b2:bf:b9:ca:73:29
Fingerprint (sha256): 01:18:49:d6:37:da:2f:1f:fb:8d:12:a5:bd:ff:09:e6:4e:19:1b:75:4d:91:3b:9f:1b:69:d3:24:53:cd:5a:3b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate ldap-mgmnt.corp.yahoo.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ldap-mgmnt.corp.yahoo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ldap-mgmnt.corp.yahoo.com
ldap-mgmnt.cia.corp.bf1.yahoo.com

Other certificates including the domain name yahoo.com

(limited to 100 certificates)
digits3.data.yahoo.com
checkout.yahoo.com
*.sonic.mail.yahoo.com
master.data.yahoo.com
login.yahoo.com
backend.paranoids.corp.yahoo.com
qa.edge.ymon.corp.ne1.yahoo.com
*.store.yahoo.com
www.yahoo.com
chilledfilled.corp.gq1.yahoo.com
san.test-paranoids.yahoo.com
allhands.corp.yahoo.com
*.stage.login.yahoo.com
test012.san.test-paranoids.yahoo.com
tw.preview.campaign.money.yahoo.com
stage.api.onepush.mobile.yahoo.com
endurepoor.corp.ir2.yahoo.com
privbin.corp.yahoo.com
tw.mobi.yahoo.com
tw.knowledge.yahoo.com
stg-sandyui-01.netops.corp.gq1.yahoo.com
cosmos.bcp.search.corp.yahoo.com
testdata.factory.vespa.corp.yahoo.com
mobileexcellence.corp.yahoo.com
staging-origin-life.huffpo.net
lab-uic-pub.lab.rich.corp.yahoo.com
pr.comet.yahoo.com
admin.nevec.yahoo.com
steamedesteemed.corp.sg3.yahoo.com
stage.api.pes.yahoo.com
test.dek.ckms.yahoo.com
goglobal-demo.g11n.corp.gq1.yahoo.com
academy-delivery.cc.corp.yahoo.com
beta.api.backyard3.corp.yahoo.com
tw.billing.yahoo.com
sp.analytics.yahoo.com
dwdevetl02.fin.corp.gq1.yahoo.com
uc-gq1-vcenter1.corp.gq1.yahoo.com
backend-stage.paranoids.corp.yahoo.com
wherehaus.stage.geotech.corp.yahoo.com
gq1-psinprd-clu.psi.corp.gq1.yahoo.com
*.jeditools.mail.yahoo.com
kite-tools.pbp.corp.ne1.yahoo.com
origin.qa.dispatcher.yahoo.com
*.ea.ops.yahoo.com
endurepoor.corp.ir2.yahoo.com
*.report.gemini.yahoo.com
api.soln-stage.isvc.cp.yahoo.com
backend-stage.paranoids.corp.yahoo.com
san.test-paranoids.yahoo.com
san.test-paranoids.yahoo.com
tw.db.media.yahoo.com
*.cs.gq1-1.manhattan.gq1.yahoo.com
sh-gdpr.search.yahoo.com
*.abumedia.yahoo.com
*.answers.ycpi.yahoo.com
*.tee.ops.search.yahoo.com
privbin.corp.yahoo.com
oxy-oxygen-4a0620a5.gq1.yahoo.com
e2.ycpi.aeb.yahoo.com
secure02.lithium.com
telco-sg3-jump.sg3.corp.yahoo.com
legacy.pop.mail.yahoo.com
privbin.corp.yahoo.com
admin.ckms.yahoo.com
sp.analytics.yahoo.com
*.api.gemini.yahoo.com
dev.ui.payments.yahoo.com
dspskadpostback.aaca.yahooinc.com
san.test-paranoids.yahoo.com
splunk1.flurry.gq1.yahoo.com
certreloader.demo.yahoo.com
splunk.dspe.yahoo.com
src2.yahoo.com
profileproxy.prod.tgt.bf1.yahoo.com
legaltoolsstage.corp.yahoo.com
test1.yahoo.com
st39.yahoo.com
beta.edit.client.yahoo.com
chat.ouroath.com
endurepoor.corp.ir2.yahoo.com
*.chef.ops.yahoo.com
backend-stage.paranoids.corp.yahoo.com
san.test-paranoids.yahoo.com
manhattan.yahoo.com
dev.productcentral.aol.com
*.tripod.bf2.yahoo.com
ws.mobile.mail.yahoo.com
vpn2-1-gci.eglbp.corp.yahoo.com
endurepoor.corp.ir2.yahoo.com
yakl-rules.ops.yahoo.com
jp.techcrunch.com
ldap-mgmnt.corp.yahoo.com
yql.onepush.mobile.yahoo.com
*.hlfs.yahoo.com
*.wv.msg.yahoo.com
endurepoor.corp.ir2.yahoo.com
ads.vidible.tv
kronostest.fin.corp.yahoo.com
api.native.yahooinc.com

Certificate

The complete raw certificate details for ldap-mgmnt.corp.yahoo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoezUzxwXtNPLip/aNmxO
xYLn7Ei7NrLb2EIoeea1k7AccEFh4PLN8sR7rPhElHpGa5R/xqzCaSkPKpK8spEj
1k43n2MqJNfnwQ/MbA2nHPvHuK4hPqApiX5OqAIxWrDs6DYZWnhDIWBRd8dy5hUq
rf3bZoH9DvXD55TUhfyW44XtxfzzfnrCky7H5DerOvAVeTy8bFAJj2nmYQjISgAe
BdKQg2m9MruDE8BeZGEnPqoT2zeNDm2uT2b4iNYMaGjxQ1pXaYpH3H9BG18acJOt
Pl4PzyYouC2tmEORctAvTnTODqPsxECMnrVRScixl3maDUyTHYgwv0mMkt1yySV6
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3595667200067171565247844719747668048
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Yahoo Holdings, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ldap-mgmnt.corp.yahoo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20441152958957737483856811649792912178475118359069685782351190148340153988036811574217569841262882687803309459398775643930730743484679541067832963000405208531800753047346387782782604389044939963144472246901301023654571721319916710681721808922227301360412957598723245979197617465938417683194955655788802133046943927055382541608585566807835647622033082745323295037816472437296146930056583872756865639997163954857907202810229607261685600285524123422166889401067234873128104045192172962098173676679257475613140893583275656233105105889512405557873554921998113202613657422143884711315068420417756058129662798372696880413187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fec89c7cd8b01c1c3104e6106a1032c9a2b3a2e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldap-mgmnt.corp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldap-mgmnt.cia.corp.bf1.yahoo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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