lt3-distreview-dotnet-ws-test.web-dev.bms.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0b:a2:77:cd:6d:95:73:13:e1:38:bb:80:3d:42:2b:71 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lt3-distreview-dotnet-ws-test.web-dev.bms.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:a2:77:cd:6d:95:73:13:e1:38:bb:80:3d:42:2b:71
Serial Number (int): 15465089927147406107245261532231248753
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a0:7b:e8:74:ce:d5:50:5e:b3:06:0a:bf:68:65:3c:a1:7b:13:ef:b2
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 76:e8:3b:6c:ae:8a:0e:7f:7a:20:84:9f:77:38:2d:1d:f8:8c:6e:d0
Fingerprint (sha256): 01:22:ee:65:28:0b:7f:e8:a4:ff:3c:71:fc:06:15:6f:aa:e3:00:83:cc:0e:9d:47:99:73:bc:38:94:1f:c8:a0

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate lt3-distreview-dotnet-ws-test.web-dev.bms.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lt3-distreview-dotnet-ws-test.web-dev.bms.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lt3-distreview-dotnet-ws-test.web-dev.bms.com

Other certificates including the domain name bms.com

(limited to 100 certificates)
*.web-uat.bms.com
cloudapi-dev.web-dev.bms.com
pmwebspec-dev.web-dev.bms.com
bms.com
online-annual-report-2019.bms.com
chatlanguage-api-uat.web-dev.bms.com
sclaunchapi.web.bms.com
sampleredirector-lab.web-lab.bms.com
phlieconusc.bms.com
*.web-uat.bms.com
purl-dev.web-dev.bms.com
s3restapi.web-dev.bms.com
compliance-uat.web-dev.bms.com
simphoni-uat.web-dev.bms.com
sitecentral-intg-uat.web-dev.bms.com
*.web.bms.com
akamaisecure3.qualtrics.com
pc-rc.web.bms.com
sampleredirector-lab.web-lab.bms.com
confluencetest.web-dev.bms.com
lt3-distreview-ws-dev1.web-dev.bms.com
*.web.bms.com
jira.web-dev.bms.com
frictionless.bms.com
*.web-dev.bms.com
gettoknowlungcancer-dev.web-dev.bms.com
testebstandjava.web-dev.bms.com
testebstandej.web-dev.bms.com
svclayer-api-rc.web.bms.com
compgps-dev.web-dev.bms.com
siteminder-dev.web-dev.bms.com
medsights-rc.web.bms.com
iddea-mauth-proxy-dev.web-dev.bms.com
eaaapi-uat.web-dev.bms.com
paxata-dev-cm.web-dev.bms.com
*.web-dev.bms.com
pdmpa-uat.web-dev.bms.com
connect2bms.com
lt3-distreview-dotnet-ws-test.web-dev.bms.com
active-journal-dev.web-dev.bms.com
sinequa-uat.web-dev.bms.com
siteminder-dev.web-dev.bms.com
loadingdock-lab.web-lab.bms.com
who.bms.com
glt-rc-preview.web.bms.com
beio-dev.web-dev.bms.com
*.web-dev.bms.com
360-uatr.web-dev.bms.com
siteminder-dev.web-dev.bms.com
fun-rc.web.bms.com
*.web-dev.bms.com
eportal-uat.bms.com
gpve.bms.com
idm-idq-dev.web-dev.bms.com
loki.bms.com
sampleredirector-dev.web-dev.bms.com
tcws.web.bms.com
gps-data-mapping-dev.web-dev.bms.com
edcnodehdp02.web.bms.com
siteminder-dev.web-dev.bms.com
siteminder-dev.web-dev.bms.com
*.web.bms.com
commgps-preview.web.bms.com
fun-dev.web-dev.bms.com
bms.com
pubd-rc.web.bms.com
sinequa-uat.web-dev.bms.com
contractorvideo.web-dev.bms.com
beio-pushnotification-api-dev.web-dev.bms.com
*.spappsp.bms.com
testebstandej.web-dev.bms.com
bms.com
uspcomplianceandethics.bms.com
mytrials.bms.com
paxata-dev-cm.web-dev.bms.com
tcwsloginsvc-lab.web-lab.bms.com
testebstandej.web-dev.bms.com
sinequa-dev.web-dev.bms.com
eroster-api-uat.web-dev.bms.com
rwcbff09.pri.bms.com
ewhitebook.bms.com
*.web-uat.bms.com
clinicaltrialsnavigator-dev.web-dev.bms.com
fiori.bms.com
pubpodcasts.web.bms.com
testebstandej.web-dev.bms.com
autoptp-rc.web.bms.com
rex-tst.bms.com
sampleredirector-dev.web-dev.bms.com
sampleredirector-lab.web-lab.bms.com
svclayer-npa-api-dev.web-dev.bms.com
*.bms.com
t-rc.web.bms.com
testebstandnodejs.web-dev.bms.com
sampleredirector-dev.web-dev.bms.com
*.web.bms.com
*.web-dev.bms.com
smusath.net.bms.com
lt3-distreview-ws-dev.web-dev.bms.com
*.web-uat.bms.com

Certificate

The complete raw certificate details for lt3-distreview-dotnet-ws-test.web-dev.bms.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEsDCCA5igAwIBAgIQC6J3zW2VcxPhOLuAPUIrcTANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA0MTYwMDAwMDBaFw0yMDA1MTYx
MjAwMDBaMDgxNjA0BgNVBAMTLWx0My1kaXN0cmV2aWV3LWRvdG5ldC13cy10ZXN0
LndlYi1kZXYuYm1zLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANJ97p0+DC0L4RsFjmz4QVj+QK5RObw9SNMLRoUQKNk1nEFtC7epln0keEkaAO50
Di/k7EmLGOOZszsoUcbtpjW8QlSskv6kk2Xf2A8RdV58tcjY6DtGCN3OWz63jsqU
CjoxK6bOAPqXLp4rEM1rR5pdYLqTXvab/H1jsf8ZaOgi41k8S2690xGLg4n5lLRr
1y8in3U6dxZDniMIh2WcuztYa48ax/xtpnaeJA3+V+lFM/zYMtHQvR1oDvfkZ5Ct
XMr+gdTxBKE5EftMwYTd/7AEYEaiueDUOERXYwZaLVVKe+mDdTAIosw33HhINdGO
3RRxHVJNz1rB1j4PhYGzgD8CAwEAAaOCAaYwggGiMB8GA1UdIwQYMBaAFFmkZgZS
oHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBSge+h0ztVQXrMGCr9oZTyhexPvsjA4
BgNVHREEMTAvgi1sdDMtZGlzdHJldmlldy1kb3RuZXQtd3MtdGVzdC53ZWItZGV2
LmJtcy5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpv
bnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYG
Z4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Au
c2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNj
YTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADATBgor
BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgToaMc162zAhzv4G
C6EjODmEE59kCDarmYE7woxUoe/rPlWoLjmbQmCzc32BJ0/7kBa94iOFJWlRW7Az
z/cyUnFe0raHwuEdMauIcFnjrCfri/OHPh/8jSMKqbfycKCIbPhTNBhio/DI0bhX
521j/o+9HghA7nwzo2y1wXCYkqODvFOd1i3kADkm6mW1FA6Urdxfk76vsaihgGFD
tavgphzu5i2Fru7TVjyu6PtgNed9r9+2UXrBqCZKBWi31z0e1RntubPTQLojCQlJ
MUEubhCDxJf56PFCIh/f5Dmyn7AaOF2zoMtHmnV6k/v4ByQIndbAWl+dPi4VT834
whQjTw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n3unT4MLQvhGwWObPhB
WP5ArlE5vD1I0wtGhRAo2TWcQW0Lt6mWfSR4SRoA7nQOL+TsSYsY45mzOyhRxu2m
NbxCVKyS/qSTZd/YDxF1Xny1yNjoO0YI3c5bPreOypQKOjErps4A+pcunisQzWtH
ml1gupNe9pv8fWOx/xlo6CLjWTxLbr3TEYuDifmUtGvXLyKfdTp3FkOeIwiHZZy7
O1hrjxrH/G2mdp4kDf5X6UUz/Ngy0dC9HWgO9+RnkK1cyv6B1PEEoTkR+0zBhN3/
sARgRqK54NQ4RFdjBlotVUp76YN1MAiizDfceEg10Y7dFHEdUk3PWsHWPg+FgbOA
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15465089927147406107245261532231248753
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lt3-distreview-dotnet-ws-test.web-dev.bms.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26572143469364620084508733864614584333335524780222575186207274644519987370042561779480072875153429050811310286812827624950534624796861264614716720022421576971660271647724813933562633498565656095053925432881923633463399084226529846580815481108344315541735220857460002905290159433013020854619158101723300362929090345105930309929285489522767666292576341383333368213027574832576916616839900792857492553516617023567241174331746643936829653819591006561347005501192582401321984433362553597571754954983384946402766539264580883610067601340236364518213963309430224166007654409071423951741702429284705264110765170159159799414847
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a07be874ced5505eb3060abf68653ca17b13efb2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lt3-distreview-dotnet-ws-test.web-dev.bms.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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