nms-test2.wbd.com

- Warner Bros. Discovery, Inc. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 0e:67:7a:bf:26:e1:a7:f5:0f:50:3f:46 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Warner Bros. Discovery, Inc.

Organization: Warner Bros. Discovery, Inc.
State / Province: New York
Locality: New York
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:67:7a:bf:26:e1:a7:f5:0f:50:3f:46
Serial Number (int): 4457889151759871056549003078
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: 21:20:78:64:2f:7d:ec:d8:89:e1:57:12:48:d2:6e:1e:1b:fe:e8:74
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): bb:fd:70:48:90:cc:a2:5b:3d:06:90:16:7c:e4:c8:32:0b:e1:6f:0e
Fingerprint (sha256): 01:a9:22:cb:64:4f:97:6a:5f:8c:8d:9d:ff:59:fb:71:07:0f:ac:a5:6b:e8:14:0f:31:25:d0:36:e7:1a:dd:9b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate nms-test2.wbd.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nms-test2.wbd.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nms-test2.wbd.com

Other certificates including the domain name wbd.com

(limited to 100 certificates)
tars.wbd.com
ssobiz.wbd.com
thv.warnermedia.com
nms-test2.wbd.com
newsletter.wbd.com
neo-dev.wbd.com
cnn-datascience.wbd.com
san-005.ceros.com
clarityuat.wbd.com
pathfinder-dev.wbd.com
snapshot2.prod.bc.wbd.com
dev-tars.wbd.com
dev.lookercloud.wbd.com
san-005.ceros.com
t-rexstg.wbd.com
prodeastwbdappcentralappservice01.wbd.com
qaiamadminappservice02.wbd.com
snapshot1.dev.bc.wbd.com
clp-status2.prod.bc.wbd.com
niatest2.wbd.com
iamadmindev.warnermedia.com
ws.screentrack.wbd.com
*.tan-staging.wbd.com
san-005.ceros.com
jenkins.dev.dap.wbd.com
dev.msd-apps.wbd.com
pulse.wbd.com
dtag-api.wbd.com
pac.wbd.com
adsalesush.wbd.com
niatest2.wbd.com
dev.thumb.morty.wbd.com
ssobizqa.wbd.com
knowledgelibrary.wbd.com
prodeastaupappservice02.wbd.com
san-005.ceros.com
qaaupappservice2.wbd.com
airflow.dev.dap.wbd.com
snapshot2.dev.bc.wbd.com
tan-staging.wbd.com
san-005.ceros.com
pinky.dev.neo-dev.wbd.com
*.wbd.com
clp-status2.dev.bc.wbd.com
self-service-catalog.gics.wbd.com
SAPCitrix.WBD.com
ssobizqa.wbd.com
san-005.ceros.com
api.screentrack.wbd.com
prodeastwbdmfaappservice01.wbd.com
boprod.wbd.com
gethelp.wbd.com
spy-dev.wbd.com
san-005.ceros.com
san-005.ceros.com
*.wbd.com
san-005.ceros.com
vdiwest.wbd.com
cap.wbd.com
pac.wbd.com
*.wbd.com
dev-chatapp.wbd.com
tableau.wbd.com
warnerbros.com
*.atlas.wbd.com
2c2pevc01v.inf.wbd.com
*.wbd.com
san-005.ceros.com
san-006.ceros.com
oasis.gics.wbd.com
sit.api.p2.inventory.wbd.com
dtag-jsreport.wbd.com
qamfaappservice02.wbd.com
infadevpowercenter.wbd.com
qamfaappservice02.wbd.com
prodwestcapappservice01.wbd.com
t-rex.warnermediagroup.com
fluxcd-dashboard.beta.dap.wbd.com
creativeshop.warnermedia.com
provysweb.wbd.com
devmfaappservice.wbd.com
gethelp-dev.wbd.com
live-cf.wbd.com
brand.wbd.com
bi.discovery.com
fluxcd-notify.dap.wbd.com
clp-health-api.neo.wbd.com
cprhistory.dev.wbd.com
screeners.wbtvd.com
eshop.wbd.com
san-005.ceros.com
*.promo.bifrost.wbd.com
dev-wbr-api.wbd.com
ssobizqa.wbd.com
splint.us-east.prod.bc.wbd.com
san-006.ceros.com
clarity.wbd.com
*.wbd.com
accredible.irc.queensu.ca
eContracts.wbd.com

Certificate

The complete raw certificate details for nms-test2.wbd.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgIMDmd6vybhp/UPUD9GMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMzEyMjExOTIzMTNaFw0y
NTAxMjExOTIzMTJaMHYxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhOZXcgWW9yazER
MA8GA1UEBxMITmV3IFlvcmsxJTAjBgNVBAoTHFdhcm5lciBCcm9zLiBEaXNjb3Zl
cnksIEluYy4xGjAYBgNVBAMTEW5tcy10ZXN0Mi53YmQuY29tMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbiL0yUx1/jD0dKCz4vDFzIylgvQtHWcDSsu
hB5hiu4JvihAO9X+satNGvBICtID0WuButvRfl3FY0gJtRRYneza6Abx8H+KMQ9p
eVfCz5khy32unVeXaQLUEHnJiT7SXCcH205XTdFv8Tmjzy08mzmD3roUuHCTeuBv
YT+A5krBiPGRqpAovp2QOMVaQPLqNVMS8w4gmJ6iN95pVKqbKKmyEw1PTvjZU+ej
Cprg9J+5ZGFB2GDeYEnXcLEf2Bsez9SeBlS/Shp6KA996zRVGL0bF3tuc65jiO78
yrEUY3f7rFpwZxe3Op7kqmWwYTcnsIyD4sZS3Nu0ti+3942WzwIDAQABo4IBnTCC
AZkwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwgY4GCCsGAQUFBwEBBIGB
MH8wRAYIKwYBBQUHMAKGOGh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2Fj
ZXJ0L2dzcnNhb3Zzc2xjYTIwMTguY3J0MDcGCCsGAQUFBzABhitodHRwOi8vb2Nz
cC5nbG9iYWxzaWduLmNvbS9nc3JzYW92c3NsY2EyMDE4MFYGA1UdIARPME0wQQYJ
KwYBBAGgMgEUMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24u
Y29tL3JlcG9zaXRvcnkvMAgGBmeBDAECAjAcBgNVHREEFTATghFubXMtdGVzdDIu
d2JkLmNvbTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgw
FoAU+O9/8s14Z6jeb48kjYjxhwMCs+swHQYDVR0OBBYEFCEgeGQvfezYieFXEkjS
bh4b/uh0MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA9
KBPnRiV4fI10qSBKydU4XocxoVco8ztY+ZWX4pVH5EDC2DaDyFKWwdjcmkFmSqyx
BWn2oT1DhxxVJVakVSm9HAqLFLfN1rjX589wm8JfV+1eKANlUhX7bIWXCvgLi8w3
w0BDIPzet/vl9kq2/Va1qn2io3wPR5At7HR35dwjJpGxSG5X2wQVZkkyGv3Ezdgx
Sv8pCX+fcBME+eC4U6phH01JAGqBWlPZVXyqDiRsyuGB6f170FJ6pZernc+F0kpR
2BcJViWtAMcMWuFqf6MMxkJ4JW+lcMemgEb1+dD7I04lbTT90LqS37L5BtOzAKCd
UVluMBuniYNrcESvLq8q
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbiL0yUx1/jD0dKCz4vD
FzIylgvQtHWcDSsuhB5hiu4JvihAO9X+satNGvBICtID0WuButvRfl3FY0gJtRRY
neza6Abx8H+KMQ9peVfCz5khy32unVeXaQLUEHnJiT7SXCcH205XTdFv8Tmjzy08
mzmD3roUuHCTeuBvYT+A5krBiPGRqpAovp2QOMVaQPLqNVMS8w4gmJ6iN95pVKqb
KKmyEw1PTvjZU+ejCprg9J+5ZGFB2GDeYEnXcLEf2Bsez9SeBlS/Shp6KA996zRV
GL0bF3tuc65jiO78yrEUY3f7rFpwZxe3Op7kqmWwYTcnsIyD4sZS3Nu0ti+3942W
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4457889151759871056549003078
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 19:23:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-21 19:23:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Warner Bros. Discovery, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nms-test2.wbd.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17890604118517724714567663610545970730072314834249301820006248110445602002731976095047546174085572181664909969596171349563640077113466416653098633454428956036528102486777971233579612480403111957427338326016650900657037390569981581571276773713052643700906841486904529552372872481735505922819428604410807659762808171091350831315234242114116084363729520190030135220771625788617752015063932539655103592799264032401135206389598055365334302580737238185969857354762824200958313529229564839739772707261227237555822420750475077264829393296678653023872124802519615404480882902813884072887887677341938776363878848924242739566287
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nms-test2.wbd.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							212078642f7decd889e1571248d26e1e1bfee874
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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