sitehandler-emea3.ericsson.net

- Ericsson -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 02:8c:8d:2d:51:05:50:cf:58:c5:cd:3e:88:f3:19:83 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ericsson

Organization: Ericsson
Organization unit: IT Services
State / Province: Stockholm
Locality: Stockholm
Country: SE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:8c:8d:2d:51:05:50:cf:58:c5:cd:3e:88:f3:19:83
Serial Number (int): 3388240961860847680045272934854629763
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 8b:28:90:58:89:bd:b1:3d:75:f2:2a:e8:07:2b:17:92:a1:08:12:a1
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 55:f0:25:e3:32:bd:40:35:26:3b:b6:b1:8e:cb:b4:cd:ea:03:e0:95
Fingerprint (sha256): 01:dd:63:80:92:09:8e:d9:64:b2:03:23:c5:18:0c:ec:92:85:ec:07:a2:1b:6f:05:ca:33:97:08:48:0e:1d:c6

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate sitehandler-emea3.ericsson.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sitehandler-emea3.ericsson.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sitehandler-emea3.ericsson.net

Other certificates including the domain name ericsson.net

(limited to 100 certificates)
sfn-acc.ericsson.net
wfmuat-loadtest-so4-vip.uat.sdt.ericsson.net
sitehandler-na3.ericsson.net
p437.clm.ericsson.net
*.ericsson.net
sitehandler-anza.ericsson.net
bbcclient20.be.bbc.cleanfeed.ptp.ebms.ericsson.net
stg.mm.ebms.ericsson.net
prism.msts.ericsson.net
loginppd.ericsson.net
login.ericsson.net
callme.cct.ericsson.net
sitehandler-apac2.ericsson.net
m5.ericsson.net
myaccount-dev.ericsson.net
iot-mqttp.ericsson.net
availabilitytracker.emps.ebsd.ericsson.net
att-m.c3.ericsson.net
reports.siterollout.ericsson.net
news.internal.ericsson.net
swgwacc.ericsson.net
dock.xcs.c3.ericsson.net
access.us.msdp.ericsson.net
nels1.vims.live.ericsson.net
ctrl-comcastvran.live.ericsson.net
www.11001.sitestatustool.ericsson.net
hwsonline-apprd.ebusiness.sam.ericsson.net
ideaboxes.ericsson.net
sm2.prod.dcp.ericsson.net
ctrl-5gott.lab.ericsson.net
emftacc.ericsson.net
atlas.10010.gtec.seln.ete.ericsson.net
test.ericsson.net
lu.test.seb.cct.ericsson.net
tasks.mm.ebms.ericsson.net
gtec10009box5cic.ericsson.net
seg1-sweden.ericsson.net
ee.test.seb.cct.ericsson.net
crmbridge.emps.ebsd.ericsson.net
sitehandler-apac3.ericsson.net
sitehandler-na3.ericsson.net
fiber.eams.ericsson.net
itsm-prod.ericsson.net
origin-ep.ebusiness.sam.ericsson.net
cis.bscs.ericsson.net
ep-f75.wam.ebusiness.ericsson.net
ahot4.ericsson.net
*.eightfold.ai
restapi.ericsson.net
fss2.ericsson.net
origin-srm-q.wam.ebusiness.ericsson.net
emp-prod-acc-we.ebsd.ericsson.net
tapp-test.lss.ericsson.net
origin-srm.wam.ebusiness.ericsson.net
kpn-wgp.ptt.ericsson.net
sitehandler-apac2.ericsson.net
dashboard.edit.ptp.ebms.ericsson.net
sitehandler-emea3.ericsson.net
sitehandler-na3.ericsson.net
mplatform.dev.sdt.ericsson.net
elis-acc.ericsson.net
webcom.live.ericsson.net
ls3.elk.jp.qa.vcc.cvc.ericsson.net
acc.lar.ericsson.net
ebusiness.ericsson.net
gtec10009box9cic.ericsson.net
golsacc.ericsson.net
test.play.ericsson.net
opuniverse.dcp.ericsson.net
nim.edr.va.preprod.sdt.ericsson.net
edcatest.live.ericsson.net
cdn.dev.mm.ebms.ericsson.net
bbcclient14.cf.bbc.cleanfeed.ptp.ebms.ericsson.net
chatbotpilot1.ericsson.net
ctrl-rkvran04.live.ericsson.net
bssug.ericsson.net
*.mhealth.ericsson.net
sesbmg14.ericsson.net
server.gocd.eu.demo.vcc.cvc.ericsson.net
sbiotpfkanshimqttgw.ddm.iot-accelerator.ericsson.net
ericsson.co.gg
e025clxcol001p.celmys.ericsson.net
320749-mqtttestgw.ddm.iot-accelerator.ericsson.net
customer-native.rijeen.mash-up.c3.ericsson.net
ssl363782.cloudflaressl.com
bbcclient18.be.bbc.cleanfeed.ptp.ebms.ericsson.net
rnea1.cas.ericsson.net
operator.mdi-us.ericsson.net
atlas.5gctbe2e.live.ericsson.net
wcm.ericsson.net
cic.docomo-vran1.live.ericsson.net
bbc_client_04.cf.bbc.cleanfeed.ptp.ebms.ericsson.net
onetm.se.msdp.ericsson.net
swctools.ericsson.net
itteinnovationaccept.ericsson.net
sitehandler-emea4.ericsson.net
development.licensegateway.ericsson.net
hwsonline.amcs.ebusiness.sam.ericsson.net
logintest.cloud.ebms.ericsson.net
acc.wam-proxy.us.ericsson.net

Certificate

The complete raw certificate details for sitehandler-emea3.ericsson.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkYk0p+mbkLgsUQQOmFz
xcW5mKo5zxAjEP/srOmDWLc+w2MIAq131H0h3ZlZAXVAlfY41Pfk9+h/luz5cbEG
L1F43ZXeSv/VJs4Sm1Wr6wKltXPrjKerJzZz/9yhAyCkOB6SG8+QKV9fIFW1+HHK
v+rzy+o2P+cpERSoYqsywIfNTML7jndfnSdllZvf4M3XzXJ1g5+2iJa8JHQyfeEf
pHLqbdUPX6wtmph+BoccqYavchNucX8/d/PHmgjc6HtTNixC0edMSVKePDCbCOow
sn/dqiNEk49ZXAq9e3hUkqMymiU0mRn+036JtoS3sm5FODkG6LdTS5NpxwRWodvw
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3388240961860847680045272934854629763
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stockholm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stockholm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ericsson'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sitehandler-emea3.ericsson.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26039680039108465646525872923354296403073452463287969292696167501920652630717332825882494422461410643385106644973808013714184989226586108120655840518409625770225774612309539359455165394946313829165694105305662954900966858151636735232822240291713177627431324963796054874077407665378820266207057033625470493074434440683291660099247641871164447912562397752801398845747506000940127574514373251750895640991201718159586917923038467158455706066251019709555387182313536511010412659134986453093215878483850852408521052736568589347713936758879057665986811308863586543775344200035370123721042132266284079851707558621003200065659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8b28905889bdb13d75f22ae8072b1792a10812a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitehandler-emea3.ericsson.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000936267ae52fe5934837380488f5030b375510cb59356b3889adf07b1f8d2ddcab42550f9b12ec07fc02e77448e873e048f7b3bb2f378c7af2f2f57fbccdc4573262ae81ad70bff90ecb4a32c47e164ad35237a7f0104e02dcfd905fce28c6eacc423820daefd9f5e1a300520036c93e7e4dc085bd0da4c27e2dac9acdc72d77739e9c96133acdf9a0c816faa961bcdba761b071d0482fa1b7845d41212f1f8106cb446b245972d6a623cbb0463354162c4b6741bd1e0b5e17965d73fd7e2066e6ce497e44d260f94d90b9ac799a8c4e133230c6c39f02729fc0c8a6eacee7a591b8c8ed9cca0a632f88fd8f2410dc8f9af5959a17ac19b4922fb5ae10fd51f4