*.instenv.internal.atlassian.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 06:86:d5:87:1d:24:72:6a:ad:73:63:be:1c:0f:7c:8c was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.instenv.internal.atlassian.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 06:86:d5:87:1d:24:72:6a:ad:73:63:be:1c:0f:7c:8cSerial Number (int): 8675466611819806303089300417878654092
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: f8:c7:22:a2:7c:dd:23:dc:04:10:13:18:e5:b7:4c:57:0b:3e:6a:a5
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): e7:de:76:28:a0:72:22:33:ea:52:69:93:d9:9c:41:1e:41:0d:85:3d
Fingerprint (sha256): 01:7d:ba:ff:d9:70:63:ef:22:ff:9a:3d:68:f0:fb:00:59:ba:41:10:15:be:9c:1e:41:28:81:a5:f6:24:90:60
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate *.instenv.internal.atlassian.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.instenv.internal.atlassian.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.instenv.internal.atlassian.com
Other certificates including the domain name atlassian.com
(limited to 100 certificates)
secure07.stage.lithium.com
access.status.atlassian.com
access.status.atlassian.com
status.acquia.com
*.internal.atlassian.com
*.atlassian.com
statuspage.io
access.status.atlassian.com
prod-eu-west-1.tecton.internal.atlassian.com
directory.atlassian.com
developer.status.atlassian.com
statuspage.io
*.stg.atlassian.com
*.atlassian.com
*.staging.atlassian.io
statuspage.io
api-status.360cities.net
status.aclgrc.com
xid.agilecraft.com
api-status.360cities.net
andrei.sterda.com
community.developer.atlassian.com
statuspage.io
*.atlassian.io
s1.wpc.edgecastcdn.net
atlas.status.atlassian.com
statuspage.io
its-status.colby.edu
s2-sni.cloudinary.com
confluence.status.atlassian.com
access.status.atlassian.com
atlas.status.atlassian.com
access.status.atlassian.com
*.staging.atl-paas.net
statuspage.io
*.staging.atl-paas.net
events.atlassian.com
*.instenv.internal.atlassian.com
statuspage.io
statuspage.io
atlaskit.atlassian.com
*.stg.internal.atlassian.com
statuspage.io
jira-service-management.status.atlassian.com
atlas-alerts.mit.edu
statuspage.io
www.atlassian.com
events.atlassian.com
s1.wpc.edgecastcdn.net
*.staging.atl-paas.net
statuspage.io
akamaisecure2.qualtrics.com
statuspage.io
atlas.status.atlassian.com
bitbucket.status.atlassian.com
*.stg.services.atlassian.com
jira-service-management.status.atlassian.com
confluence.status.atlassian.com
access.status.atlassian.com
xid.agilecraft.com
statuspage.io
secure04.lithium.com
statuspage.io
secure02.stage.lithium.com
statuspage.io
access.status.atlassian.com
*.atl-paas.net
3down.mit.edu
training.atlassian.com
atlaskit.atlassian.com
statuspage.io
view.mailer.atlassian.com
bitbucket.status.atlassian.com
jira-software.status.atlassian.com
*.dev.cst.internal.atlassian.com
secure02.stage.lithium.com
adxstatus.com
xid.agilecraft.com
wac-cdn-2.atlassian.com
*.instenv-ui.internal.atlassian.com
ja.confluence.atlassian.com
statuspage.io
statuspage.io
ja.confluence.atlassian.com
statuspage.io
statuspage.io
secure07.stage.lithium.com
jira-service-management.status.atlassian.com
*.dev.atl-paas.net
*.atlassian.com
statuspage.io
bitbucket.status.atlassian.com
*.atl-paas.net
*.atl-paas.net
*.stg.internal.atlassian.com
incidents.opendevcommunity.com
atlas-alerts.mit.edu
*.stg.services.atlassian.com
ciscokineticbeta.iotspdev.io
*.staging.atlassian.io
access.status.atlassian.com
access.status.atlassian.com
status.acquia.com
*.internal.atlassian.com
*.atlassian.com
statuspage.io
access.status.atlassian.com
prod-eu-west-1.tecton.internal.atlassian.com
directory.atlassian.com
developer.status.atlassian.com
statuspage.io
*.stg.atlassian.com
*.atlassian.com
*.staging.atlassian.io
statuspage.io
api-status.360cities.net
status.aclgrc.com
xid.agilecraft.com
api-status.360cities.net
andrei.sterda.com
community.developer.atlassian.com
statuspage.io
*.atlassian.io
s1.wpc.edgecastcdn.net
atlas.status.atlassian.com
statuspage.io
its-status.colby.edu
s2-sni.cloudinary.com
confluence.status.atlassian.com
access.status.atlassian.com
atlas.status.atlassian.com
access.status.atlassian.com
*.staging.atl-paas.net
statuspage.io
*.staging.atl-paas.net
events.atlassian.com
*.instenv.internal.atlassian.com
statuspage.io
statuspage.io
atlaskit.atlassian.com
*.stg.internal.atlassian.com
statuspage.io
jira-service-management.status.atlassian.com
atlas-alerts.mit.edu
statuspage.io
www.atlassian.com
events.atlassian.com
s1.wpc.edgecastcdn.net
*.staging.atl-paas.net
statuspage.io
akamaisecure2.qualtrics.com
statuspage.io
atlas.status.atlassian.com
bitbucket.status.atlassian.com
*.stg.services.atlassian.com
jira-service-management.status.atlassian.com
confluence.status.atlassian.com
access.status.atlassian.com
xid.agilecraft.com
statuspage.io
secure04.lithium.com
statuspage.io
secure02.stage.lithium.com
statuspage.io
access.status.atlassian.com
*.atl-paas.net
3down.mit.edu
training.atlassian.com
atlaskit.atlassian.com
statuspage.io
view.mailer.atlassian.com
bitbucket.status.atlassian.com
jira-software.status.atlassian.com
*.dev.cst.internal.atlassian.com
secure02.stage.lithium.com
adxstatus.com
xid.agilecraft.com
wac-cdn-2.atlassian.com
*.instenv-ui.internal.atlassian.com
ja.confluence.atlassian.com
statuspage.io
statuspage.io
ja.confluence.atlassian.com
statuspage.io
statuspage.io
secure07.stage.lithium.com
jira-service-management.status.atlassian.com
*.dev.atl-paas.net
*.atlassian.com
statuspage.io
bitbucket.status.atlassian.com
*.atl-paas.net
*.atl-paas.net
*.stg.internal.atlassian.com
incidents.opendevcommunity.com
atlas-alerts.mit.edu
*.stg.services.atlassian.com
ciscokineticbeta.iotspdev.io
*.staging.atlassian.io
Certificate
The complete raw certificate details for *.instenv.internal.atlassian.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEfzCCA2egAwIBAgIQBobVhx0kcmqtc2O+HA98jDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMTAxMTAwMDAwMFoXDTI0MTEwNzIzNTk1OVowKzEp MCcGA1UEAwwgKi5pbnN0ZW52LmludGVybmFsLmF0bGFzc2lhbi5jb20wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuofJmSnU0iojGnSombDb1Iw5Bfajc qRQJ7J152w1FknhMOYbWEJdTM/F3CPrDlKf1P9oDbtMwrXB3XuT6oCKT6ad2g4h5 1iWiT/h7KUIF5UAzlTtYzPNaudR1qdc5qWczVuxQ8ZK7xHP4mWt7vmJUL8RFQ9t3 HXt00uvFbjBRu2oMhOBkfihkXBGwTpP7nx7QZj1G6qAY248+JaJBZjSIM42kAdmA oEj0pM0REXdPdf7z+kuLi2oj7hNuNJc5OBZhasAOhEVPUgKAIFVRh65kC4Rt5Kzt Qk0jgmek+9ZqqeROQVlEUotOJKk68W7wgNGMkJEXWtIWqaB1z2hYSbUdAgMBAAGj ggGMMIIBiDAfBgNVHSMEGDAWgBSBuA5jiokSGOX6OztQlZ/m5ZAThTAdBgNVHQ4E FgQU+McionzdI9wEEBMY5bdMVws+aqUwKwYDVR0RBCQwIoIgKi5pbnN0ZW52Lmlu dGVybmFsLmF0bGFzc2lhbi5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8E NDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0w MS5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5y Mm0wMS5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJt MDEuYW1hem9udHJ1c3QuY29tL3IybTAxLmNlcjAMBgNVHRMBAf8EAjAAMBMGCisG AQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBvvkW1Sle/vO8DvsY3 ls4KHVW+MUJubh4WcSkpuVxktT7W+jcFImQ2KmohZqJISUDMmoZSIItq0D/t9e2f 5PeIBCcUuMQmrDdMkE5i2tRiaK4jPoxhsslRWoIugI+zthwXa1cvAnpOiEu6Up1q uQeTM8FfUru/UT069KBikPBY4+onekHILu9EgOvMk8egkjJXyr0d/8BCi1PqF9He k+pR+6vqj32BkTt/Xe15Uo5H+UbVAPWjAvLEQdNFMy3VsPEU3yUuxj+PrL42RKDx wtxaZu6YJLdXArXg3wG4lm9YbzX2UqwJicUTRShyMAFx1hTgo448HKZURAbrGj/r BZGK -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqHyZkp1NIqIxp0qJmw2 9SMOQX2o3KkUCeydedsNRZJ4TDmG1hCXUzPxdwj6w5Sn9T/aA27TMK1wd17k+qAi k+mndoOIedYlok/4eylCBeVAM5U7WMzzWrnUdanXOalnM1bsUPGSu8Rz+Jlre75i VC/ERUPbdx17dNLrxW4wUbtqDITgZH4oZFwRsE6T+58e0GY9RuqgGNuPPiWiQWY0 iDONpAHZgKBI9KTNERF3T3X+8/pLi4tqI+4TbjSXOTgWYWrADoRFT1ICgCBVUYeu ZAuEbeSs7UJNI4JnpPvWaqnkTkFZRFKLTiSpOvFu8IDRjJCRF1rSFqmgdc9oWEm1 HQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8675466611819806303089300417878654092 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-07 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.instenv.internal.atlassian.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22045324043720381648123056260777901351562669724857290803630908842196918850553796395465468236736322341202288638982834535715854510549302921410181314626760082126118339019227043940897110943588986908440336743301654785239933350051882308441190756516085780185165920835861398866447440803152742654832447431895766815441879915728322937412839742993993917780829814884464853177178203227488115815283344589997103500531192107710819131613516671205304850644909123541608131700197036886868213373183524411638418089595231631436321693918800183180376357646656059814679045134598840917475251479871114516986191225691245253036815280524432759174429 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f8c722a27cdd23dc04101318e5b74c570b3e6aa5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.instenv.internal.atlassian.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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