*.device-dev.dhactivation.comcast.net

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:e2:32:0c:5f:0d:c0:81:72:ef:1a:df:03:1a:2c:f0 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.device-dev.dhactivation.comcast.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:e2:32:0c:5f:0d:c0:81:72:ef:1a:df:03:1a:2c:f0
Serial Number (int): 19783666131653527070353775472848547056
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 52:46:8b:82:eb:68:cd:7d:40:42:ca:10:b8:6b:0e:f3:1d:c7:a8:91
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 8b:5c:34:bf:8c:56:c5:e1:4a:64:95:c1:36:81:b6:08:b2:49:88:32
Fingerprint (sha256): 01:be:a2:fb:22:ce:56:f1:a4:57:b4:7b:ed:95:63:ea:7f:b1:08:e1:48:2b:4b:aa:e0:f9:21:01:8b:45:14:95

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.device-dev.dhactivation.comcast.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.device-dev.dhactivation.comcast.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.device-dev.dhactivation.comcast.net

Other certificates including the domain name comcast.net

(limited to 100 certificates)
xfwaaa.partners.sys.comcast.net
edge.images-fre-png.xcr.comcast.net
isadmin-wc-a1p.sys.comcast.net
apsportal.cable.comcast.com
sslvpn.comcast.net
*.amw2-g2.apa.comcast.net
nexus.po.sys.comcast.net
ttu-staging.comcastenterpriseservices.com
imap.ch2.comcast.net
*.device-dev.dhactivation.comcast.net
inspec-formation-test.deve-resd.comcast.net
qa2-dmsfwsrvr-fxbo-001.rtc.sys.comcast.net
mx01.biz.comcast.net
tintaiih.comcast.net
selectwifi.qa-communities.comcast.net
idp.comcast.net
*.identity.xfinity.com
cada.comcast.net
nds.cable.comcast.com
www.xfinity.comcast.net
otto.snp.comcast.com
firstrobotics.comcast.net
imap.email.comcast.net
sapecc-wc-c1q.sys.comcast.net
shuttlecloud.comcast.net
osvip-ho-a01.ece.comcast.net
jobs-stg.comcast.com
amibotted.comcast.net
xvpgridapi-dev.r53.aae.comcast.net
dt-test-07.vi.comcast.net
streamhvbr-ch2-e01p.sys.comcast.net
ama-gpt-api-comcastnow-stg.comcast.com
axon-chronos.ape.comcast.net
pimmgt-ch2-2p.platform.comcast.net
c-76-25-36-10.hsd1.co.comcast.net
shaw-bet-stage.ab.shaw.comcast.net
amdocs-aem.sys.comcast.net
*.device-dev.dhactivation.comcast.net
sptwrk-as-057p.sys.comcast.net
prestocatena-ch2-p.sys.comcast.net
x1.comcast.net
lambda-hello-world-prod.r53.aae.comcast.net
edge.myriad-lite.top.comcast.net
eccc.comcastenterpriseservices.com
*.device-dev.dhactivation.comcast.net
lambdatest.sed-dev.dh.comcast.net
*.device-dev.dhactivation.comcast.net
myapps.comcast.net
*.dashcif-nash-tn.xcr.comcast.net
sym-commonorderservice-stg.comcast.net
mail.w14zc.comcast.net
edge.cirrus-config.xcr.comcast.net
wifilogin-st.xfinity.com
*.ivodppv.xcr.comcast.net
faq.connect.comcast.net
gisstrm-po-c7p.cable.comcast.com
wirelessportal.comcast.net
videlk-dt-a1i.ula.comcast.net
*.poc.sys.comcast.net
freeswitch-ws.g.comcast.net
integration-contingent.comcast.com
*.xmidt.comcast.net
*.dev.wpil-us.comcast.net
*.test.mediaset-italia.intl.cts-ps.comcast.net
*.device-dev.dhactivation.comcast.net
inspec-lambda-form.deve-resd.comcast.net
bomui.g.cable.comcast.com
xsearch.deve-resd.comcast.net
dwg-sbc01a-con.downingtown.comcast.net
ilexservice.comcastenterpriseservices.com
stage.familyapp.comcast.net
inspec-formation.deve-resd.comcast.net
clover.comcast.net
itrcdb-wc-3i.sys.comcast.net
inspec-formation.deve-resd.comcast.net
sptwrk-as-045p.sys.comcast.net
*.device-dev.dhactivation.comcast.net
edge.music-choice-play-chainc1.top.comcast.net
ma-iportal.iris.comcast.net
test-ipv6-vm3.comcast.net
developer.xfinity.com
vd-ga-prod-e-vip.sdwan.comcast.net
*.dev.wpil-us.comcast.net
re-int.addelivery.cts.comcast.net
tuf-wc-a1p.comcast.net
turn-server-qa2-1-wbrn.comcast.net
einstein360a-uat-b.cable.comcast.com
cdn.businessclass.comcast.net
staging.ams.cim.comcast.net
*.dashcif-detr-mi.xcr.comcast.net
*.device-dev.dhactivation.comcast.net
edge.vudu-lstream-dns.top.comcast.net
ferry-api-proxy-v2-pr-48.gateway-dev.dhactivation.comcast.net
hsdmanager.sys.comcast.net
inspec-formation-test.deve-resd.comcast.net
tws.bve.comcast.net
*.dev.wpil-us.comcast.net
*.device-dev.dhactivation.comcast.net
api.wcdc.int.xfinity.com
inspec-formation-test.deve-resd.comcast.net

Certificate

The complete raw certificate details for *.device-dev.dhactivation.comcast.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEoDCCA4igAwIBAgIQDuIyDF8NwIFy7xrfAxos8DANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAyMDQwMDAwMDBaFw0yMTAzMDQx
MjAwMDBaMDAxLjAsBgNVBAMMJSouZGV2aWNlLWRldi5kaGFjdGl2YXRpb24uY29t
Y2FzdC5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiMDlhegUT
9c+M4JPto74EIPWDhvFU13Ktqytj2EwfI83srR7v/SjMjtXhyZ5coGssoVWOI/yO
KO41GK/wjp4Bwrl01L+VVSmWoxKQKsUFklgspjNKsgBV7lNmkfDRBrqXId7C9Sfe
FZFcjn0pnB+LYs2cNjXAbWFsPMJ6xpMta/E8ooMuqOPIq0czq7FfgqqQ0fy7yTXJ
UGmeD7P5nNSkLUnZD9TGbBerbNg5gE0LE+L4S7J+1AsValDLZle0LydDp7jQQyH/
JZxbwftVF9wJNXe1rHIGl6l8zeQLZn5UXL5CnHgU7E6WTlosikUmjq9i8GWXD2sL
OQ9h0/w/2Yc9AgMBAAGjggGeMIIBmjAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QH
J5Z0W/k90DAdBgNVHQ4EFgQUUkaLgutozX1AQsoQuGsO8x3HqJEwMAYDVR0RBCkw
J4IlKi5kZXZpY2UtZGV2LmRoYWN0aXZhdGlvbi5jb21jYXN0Lm5ldDAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0
MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFi
LmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUH
AQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVz
dC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3Qu
Y29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUA
MA0GCSqGSIb3DQEBCwUAA4IBAQBIz/A+cIczCar81hP9CVqt20xtNDmK49sfyV+T
ROu5M7d8jSupPrRE909dhFpNM91vHEOTv0esNnjN+R6/yA9dU6z0YgCgf9oBS0IW
ivKxbC7GclrTnwkOSy+RMLmYPaqcQLbUcPofJDKWxaA8bMux6aQgKqf9R6YbY6We
7EJHL5TQOPGEzlwyvdsVK+P4IepOnVD7frWbvbbtu8WfAe8hVIyxrWvWdRlB6FeT
S7o28hG+fvYnQ7uo/H//P0TqUYUkNIHkB5nRq8SKm4ylCVLWSuXsPCnBFP/S7zyf
SjB4HqmtWVAR89C9TLWkLZ8F9NLoL8n/CTTkEGt4uZOFOrAK
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jA5YXoFE/XPjOCT7aO+
BCD1g4bxVNdyrasrY9hMHyPN7K0e7/0ozI7V4cmeXKBrLKFVjiP8jijuNRiv8I6e
AcK5dNS/lVUplqMSkCrFBZJYLKYzSrIAVe5TZpHw0Qa6lyHewvUn3hWRXI59KZwf
i2LNnDY1wG1hbDzCesaTLWvxPKKDLqjjyKtHM6uxX4KqkNH8u8k1yVBpng+z+ZzU
pC1J2Q/UxmwXq2zYOYBNCxPi+EuyftQLFWpQy2ZXtC8nQ6e40EMh/yWcW8H7VRfc
CTV3taxyBpepfM3kC2Z+VFy+Qpx4FOxOlk5aLIpFJo6vYvBllw9rCzkPYdP8P9mH
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19783666131653527070353775472848547056
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.device-dev.dhactivation.comcast.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28553637133851597734553797890190821850091390858053949114877596666578429716074675032708755284909655097082771474530765569358160178556356611170181801018635435764358761577554947601449861164785026577923704101558465645151653047824827858582998667438283463045531634522528441994750893001068624648691450824744263862432905557990918760739901680516189235110392688180201768696870342011080668451744956894278412008997851017055709662008003264848816503279467449607222846424430874931493693903241660413831769110267707669480793746718740214278121813587092974804489983622141501528286024717011044344314966962429625660372024471973914583074621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52468b82eb68cd7d4042ca10b86b0ef31dc7a891
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.device-dev.dhactivation.comcast.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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