api.agg-qa.webtest.osu.edu

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:c0:63:bb:cf:83:73:f5:b3:ec:18:f1:fe:60:d1:01 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.agg-qa.webtest.osu.edu

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:c0:63:bb:cf:83:73:f5:b3:ec:18:f1:fe:60:d1:01
Serial Number (int): 20937363772051890600988600540894122241
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 21:c5:37:6d:38:73:5d:33:3e:ce:65:ac:63:78:9d:29:8b:e7:05:b4
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 79:7a:eb:e8:4f:5d:61:e7:d9:87:cb:ce:4a:ed:5e:56:e0:80:93:27
Fingerprint (sha256): 02:44:84:38:24:42:be:0d:43:df:14:1c:31:25:01:b2:04:7c:c6:25:74:0f:39:b1:53:25:ec:fc:84:48:f8:f7

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate api.agg-qa.webtest.osu.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.agg-qa.webtest.osu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.agg-qa.webtest.osu.edu

Other certificates including the domain name osu.edu

(limited to 100 certificates)
5757715179634688-fe2.pantheonsite.io
5674248798470144-fe1.pantheonsite.io
ksa-mrbs.webapps.engineering.osu.edu
adams.osu.edu
test-web-lws.edu.help
5719238044024832-fe2.pantheonsite.io
offer.osu.edu
5767917874446336-fe1.pantheonsite.io
5757715179634688-fe2.pantheonsite.io
5767917874446336-fe1.pantheonsite.io
5631986051842048-fe1.pantheonsite.io
acarology.osu.edu
opensource.osu.edu
5719238044024832-fe2.pantheonsite.io
5674248798470144-fe1.pantheonsite.io
5660980839186432-fe2.pantheonsite.io
5646874153320448-fe4.pantheonsite.io
5698125863845888-fe3.pantheonsite.io
5769720821186560-fe3.pantheonsite.io
ucdc.edu
history.osu.edu
5644101080842240-fe2.pantheonsite.io
5687379545292800-fe2.pantheonsite.io
5722152447770624-fe1.pantheonsite.io
nartc.fcm.arizona.edu
ksa-mrbs.webapps.engineering.osu.edu
5732910535540736-fe1.pantheonsite.io
5722152447770624-fe1.pantheonsite.io
socrates.osu.edu
costume.osu.edu
5676201666412544-fe3.pantheonsite.io
bsal.osu.edu
*.webtest.osu.edu
5672591746400256-fe3.pantheonsite.io
ksa-mrbs.webapps.engineering.osu.edu
5662543133540352-fe4.pantheonsite.io
cse.engineering.osu.edu
5722152447770624-fe1.pantheonsite.io
tbi.osu.edu
5690257819303936-fe4.pantheonsite.io
alkireproject.osu.edu
skullbase.osu.edu
5740745361195008-fe4.pantheonsite.io
insight.tk20.ehe.osu.edu
ksa-mrbs.webapps.engineering.osu.edu
5696381570252800-fe2.pantheonsite.io
5668753656250368-fe1.pantheonsite.io
5741031244955648-fe4.pantheonsite.io
preble.osu.edu
5676201666412544-fe3.pantheonsite.io
5707725409353728-fe2.pantheonsite.io
test.eis.uw.edu
5734743547052032-fe3.pantheonsite.io
legacypaydocs.osu.edu
chembio.osu.edu
heroesproject.osu.edu
tas.osu.edu
ksa-mrbs.webapps.engineering.osu.edu
www.design-engineering.princeton.edu
5677751478517760-fe2.pantheonsite.io
intranet.odee.osu.edu
heartlung.osu.edu
cfaes.osu.edu
5672591746400256-fe3.pantheonsite.io
5666083260334080-fe3.pantheonsite.io
iam-pamprd-db01.bcd.it.osu.edu
internalmedicine.osu.edu
5696381570252800-fe2.pantheonsite.io
nxterra.ucop.edu
5769720821186560-fe3.pantheonsite.io
buckeyelink3.osu.edu
5676982813589504-fe1.pantheonsite.io
5757715179634688-fe2.pantheonsite.io
5182915545661440-fe2.pantheonsite.io
5676201666412544-fe3.pantheonsite.io
ehe.osu.edu
tk20.ehe.osu.edu
ksa-mrbs.webapps.engineering.osu.edu
5726348362383360-fe3.pantheonsite.io
bme.osu.edu
5711637696741376-fe4.pantheonsite.io
mae.osu.edu
5665925286068224-fe2.pantheonsite.io
api.agg-qa.webtest.osu.edu
buckeyeturf.osu.edu
ehistory.osu.edu
akips01.coeit.osu.edu
5668753656250368-fe1.pantheonsite.io
www.hcii.cs.cmu.edu
5631986051842048-fe1.pantheonsite.io
tk20.ehe.osu.edu
advancementintranet.osu.edu
5662543133540352-fe4.pantheonsite.io
www.blogs.earthjustice.org
gisprtprd01.bcd.it.osu.edu
5722152447770624-fe1.pantheonsite.io
artsandsciences.osu.edu
bpte.osu.edu
*.nursing.osu.edu
suicideprevention.osu.edu

Certificate

The complete raw certificate details for api.agg-qa.webtest.osu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEijCCA3KgAwIBAgIQD8Bju8+Dc/Wz7Bjx/mDRATANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAzMDIwMDAwMDBaFw0yMTA0MDIx
MjAwMDBaMCUxIzAhBgNVBAMTGmFwaS5hZ2ctcWEud2VidGVzdC5vc3UuZWR1MIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b4e/esBNdaUcIXF3yGenbJ/
iD9kWNs4U+JYBNR7kr7/66BiYk+kmSk6QUlpXKKodVwr2fmN5+43q8kfjJ0Tedue
p3gQsC8wPuJoJw3bIOuX9FQvP5kkvw+l2nvRlltcoOwEsamnZQ6DssnZEtucRg1T
e6Xd/t7Qm8zhwkQnlCLJoL5+AWe9Ba39o4+owwAzUnAL1BQ+v9LpfWNUFQn55zve
cEL3XYIDtq/hpPmrg3vLuPlMo1SRAtz44lknVc3ZKxUXNr7lDrm4ZpCYirxtbHF4
6Dt1XDnMKWx0duIarbT589gGVm3YnVqR74chy7roneiRXobRWKRYH5zEDpjU9QID
AQABo4IBkzCCAY8wHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYD
VR0OBBYEFCHFN204c10zPs5lrGN4nSmL5wW0MCUGA1UdEQQeMByCGmFwaS5hZ2ct
cWEud2VidGVzdC5vc3UuZWR1MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5z
Y2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZI
AYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0
dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0
cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB
/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAH1w
d32nP89djYm736fVxqIctVolb84C3pbbzARlAIFAKZBCN9CcrutUiV40vNJ96XeB
WBhf13Iwx7Fozjgos9iQEe3b5yYcMdQnk1NIYi/6RC8GW8RI1E1fCVQoHa2eQ4st
qnkIj3RcKQCvNSJDqVVxfUeB/erWm4t2lVJaEewiie+Vwgv3BLceHcd++Lg0yNwq
E2X7Er9OgovXBmkEC2HB2RIS5AA23kamoI8Rayn8BdbP3IX3njHJaCFROuP48X11
LCvTpNIoDHAUQnCzAzxWe/BEzVLbCQNVVT259tZVS83sWMS0riNs9/brIHtqQfEp
Uw6GggDsFA1t9cWxBHU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b4e/esBNdaUcIXF3yGe
nbJ/iD9kWNs4U+JYBNR7kr7/66BiYk+kmSk6QUlpXKKodVwr2fmN5+43q8kfjJ0T
eduep3gQsC8wPuJoJw3bIOuX9FQvP5kkvw+l2nvRlltcoOwEsamnZQ6DssnZEtuc
Rg1Te6Xd/t7Qm8zhwkQnlCLJoL5+AWe9Ba39o4+owwAzUnAL1BQ+v9LpfWNUFQn5
5zvecEL3XYIDtq/hpPmrg3vLuPlMo1SRAtz44lknVc3ZKxUXNr7lDrm4ZpCYirxt
bHF46Dt1XDnMKWx0duIarbT589gGVm3YnVqR74chy7roneiRXobRWKRYH5zEDpjU
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20937363772051890600988600540894122241
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.agg-qa.webtest.osu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27487464367489522537647260630520293083961971586731172601433614353047604269318447398504534589416679707665250050274718294700048995134575661985169222077142738440410966735481161981122541305919436317655242286085365989812247740875624370733953212132114723714631988846528385940177551878934724266451749018783171629774630677465091551110947084569853419306358991878964026775053503556156788072189650344960662107157279329612733788833915984385016980499842189291057412168412814819941771429260527059562725751320644718349215277684196389898391126866855136950504279724556862029679080954242402735462304803195044789732866422608948123718901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							21c5376d38735d333ece65ac63789d298be705b4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.agg-qa.webtest.osu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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