inspec-formation.deve-resd.comcast.net

Issued by Amazon

About this certificate

This digital certificate with serial number 07:08:1a:c7:d7:c7:4c:c7:e2:4b:f8:cb:ab:4e:2e:a5 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=inspec-formation.deve-resd.comcast.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:08:1a:c7:d7:c7:4c:c7:e2:4b:f8:cb:ab:4e:2e:a5
Serial Number (int): 9346677521196940950142767308668284581
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b2:b3:29:a9:99:a7:b1:e6:2b:4f:46:6f:4d:41:fb:38:a1:dc:4b:1e
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): db:fb:96:0a:0d:ad:9b:4e:d0:1a:42:1d:1e:7f:e6:d1:78:2c:b3:5b
Fingerprint (sha256): 02:9a:fe:3b:5f:8a:61:19:31:3f:d2:e3:1c:ac:e3:7c:7e:e4:50:8d:91:06:83:08:6a:b2:11:9d:3a:02:b8:3b

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate inspec-formation.deve-resd.comcast.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for inspec-formation.deve-resd.comcast.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

inspec-formation.deve-resd.comcast.net

Other certificates including the domain name comcast.net

(limited to 100 certificates)
xfwaaa.partners.sys.comcast.net
edge.images-fre-png.xcr.comcast.net
isadmin-wc-a1p.sys.comcast.net
apsportal.cable.comcast.com
sslvpn.comcast.net
*.amw2-g2.apa.comcast.net
nexus.po.sys.comcast.net
ttu-staging.comcastenterpriseservices.com
imap.ch2.comcast.net
*.device-dev.dhactivation.comcast.net
inspec-formation-test.deve-resd.comcast.net
qa2-dmsfwsrvr-fxbo-001.rtc.sys.comcast.net
mx01.biz.comcast.net
tintaiih.comcast.net
selectwifi.qa-communities.comcast.net
idp.comcast.net
*.identity.xfinity.com
cada.comcast.net
nds.cable.comcast.com
www.xfinity.comcast.net
otto.snp.comcast.com
firstrobotics.comcast.net
imap.email.comcast.net
sapecc-wc-c1q.sys.comcast.net
shuttlecloud.comcast.net
osvip-ho-a01.ece.comcast.net
jobs-stg.comcast.com
amibotted.comcast.net
xvpgridapi-dev.r53.aae.comcast.net
dt-test-07.vi.comcast.net
streamhvbr-ch2-e01p.sys.comcast.net
ama-gpt-api-comcastnow-stg.comcast.com
axon-chronos.ape.comcast.net
pimmgt-ch2-2p.platform.comcast.net
c-76-25-36-10.hsd1.co.comcast.net
shaw-bet-stage.ab.shaw.comcast.net
amdocs-aem.sys.comcast.net
*.device-dev.dhactivation.comcast.net
sptwrk-as-057p.sys.comcast.net
prestocatena-ch2-p.sys.comcast.net
x1.comcast.net
lambda-hello-world-prod.r53.aae.comcast.net
edge.myriad-lite.top.comcast.net
eccc.comcastenterpriseservices.com
*.device-dev.dhactivation.comcast.net
lambdatest.sed-dev.dh.comcast.net
*.device-dev.dhactivation.comcast.net
myapps.comcast.net
*.dashcif-nash-tn.xcr.comcast.net
sym-commonorderservice-stg.comcast.net
mail.w14zc.comcast.net
edge.cirrus-config.xcr.comcast.net
wifilogin-st.xfinity.com
*.ivodppv.xcr.comcast.net
faq.connect.comcast.net
gisstrm-po-c7p.cable.comcast.com
wirelessportal.comcast.net
videlk-dt-a1i.ula.comcast.net
*.poc.sys.comcast.net
freeswitch-ws.g.comcast.net
integration-contingent.comcast.com
*.xmidt.comcast.net
*.dev.wpil-us.comcast.net
*.test.mediaset-italia.intl.cts-ps.comcast.net
*.device-dev.dhactivation.comcast.net
inspec-lambda-form.deve-resd.comcast.net
bomui.g.cable.comcast.com
xsearch.deve-resd.comcast.net
dwg-sbc01a-con.downingtown.comcast.net
ilexservice.comcastenterpriseservices.com
stage.familyapp.comcast.net
inspec-formation.deve-resd.comcast.net
clover.comcast.net
itrcdb-wc-3i.sys.comcast.net
inspec-formation.deve-resd.comcast.net
sptwrk-as-045p.sys.comcast.net
*.device-dev.dhactivation.comcast.net
edge.music-choice-play-chainc1.top.comcast.net
ma-iportal.iris.comcast.net
test-ipv6-vm3.comcast.net
developer.xfinity.com
vd-ga-prod-e-vip.sdwan.comcast.net
*.dev.wpil-us.comcast.net
re-int.addelivery.cts.comcast.net
tuf-wc-a1p.comcast.net
turn-server-qa2-1-wbrn.comcast.net
einstein360a-uat-b.cable.comcast.com
cdn.businessclass.comcast.net
staging.ams.cim.comcast.net
*.dashcif-detr-mi.xcr.comcast.net
*.device-dev.dhactivation.comcast.net
edge.vudu-lstream-dns.top.comcast.net
ferry-api-proxy-v2-pr-48.gateway-dev.dhactivation.comcast.net
hsdmanager.sys.comcast.net
inspec-formation-test.deve-resd.comcast.net
tws.bve.comcast.net
*.dev.wpil-us.comcast.net
*.device-dev.dhactivation.comcast.net
api.wcdc.int.xfinity.com
inspec-formation-test.deve-resd.comcast.net

Certificate

The complete raw certificate details for inspec-formation.deve-resd.comcast.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgIQBwgax9fHTMfiS/jLq04upTANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDA0MTMwMDAwMDBaFw0yMTA1MTMx
MjAwMDBaMDExLzAtBgNVBAMTJmluc3BlYy1mb3JtYXRpb24uZGV2ZS1yZXNkLmNv
bWNhc3QubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLHK/r8x
RlheF4wVLhQ4Mb3zax7eUJeA3ezjsktzgv6a5eXzGhWrvxnZx+RJFxKDHIBnI1Md
/Kvm9TMCqUuZYph9nmwNo+B1h2op8wqMXENTBTMvtO2TGOeY0ZvFRbWTs4bmPccn
G3PJVJe/NkgeBD6QXE4jLfNf0aIt6fobMCKrp7ZpoXKFiBoj4ZEe6hK7XHrbNPmw
YG4N0u++NvR49WRQbRbemNiFIASekcq3q58aEa9Y+OE5iRXwVWNT4bJwfsGKhPai
8EN5PvzEkqc7btNDxuJFCxOW6KgVo+V1c22cmSrjgZbQlA4FkXiJCbzpsWbEs45d
lSnt0k5q0n7hqQIDAQABo4IBnzCCAZswHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOU
ByeWdFv5PdAwHQYDVR0OBBYEFLKzKamZp7HmK09Gb01B+zih3EseMDEGA1UdEQQq
MCiCJmluc3BlYy1mb3JtYXRpb24uZGV2ZS1yZXNkLmNvbWNhc3QubmV0MA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0f
BDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2Nh
MWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEF
BQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRy
dXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVz
dC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQC
BQAwDQYJKoZIhvcNAQELBQADggEBABajZ11qa4FVVpGGYt2ko8vRBHpdKWgAg2J7
kLeETLSzCiWQ44h58n8Z5FSn/2ahaIokY0HCE6bytP/dfwlUz843kfPLvS882PnL
vX3/1p1c+GGmP74qeRyrtwJYlf2+LbQ1MlpaLvtBEW01jPu54+bNcEXAbWQRCfU/
RPdLSNQElfw7zWlWli0JBha58q0AwVR85pDKGZHE/hKepGiThX0hNxIbZjz3VbBY
Idh7UpvFcA5gl7JExZNmbmZDoVWGQlY+YS0xZziquVidN2aJ5abu/9Qmn87ugnPq
g2BwyHdTCueu0q1iuLSoL4RBCSQqEUNYgNv2hOVUQWSq4qXeXLk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLHK/r8xRlheF4wVLhQ4
Mb3zax7eUJeA3ezjsktzgv6a5eXzGhWrvxnZx+RJFxKDHIBnI1Md/Kvm9TMCqUuZ
Yph9nmwNo+B1h2op8wqMXENTBTMvtO2TGOeY0ZvFRbWTs4bmPccnG3PJVJe/Nkge
BD6QXE4jLfNf0aIt6fobMCKrp7ZpoXKFiBoj4ZEe6hK7XHrbNPmwYG4N0u++NvR4
9WRQbRbemNiFIASekcq3q58aEa9Y+OE5iRXwVWNT4bJwfsGKhPai8EN5PvzEkqc7
btNDxuJFCxOW6KgVo+V1c22cmSrjgZbQlA4FkXiJCbzpsWbEs45dlSnt0k5q0n7h
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9346677521196940950142767308668284581
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'inspec-formation.deve-resd.comcast.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25840287184154094680843675774778317702483795984670497441012250192586761425556984132619937027207213726851641431251431162909069016720126710636144358331753855530439430182135102697981858004542411452805971765875898694652360876308727765814780520698496487501384150131910853347995919771641353109206584460278098569125396016702433188935794631326252450989166049333944536198103585857538486988792658277296075912780486163659626256851403124896922089759524344141538971374703174734574743393635329403181262268946737568157502519446236699139796374509990180331322002926979551883476974952887212263194719353946785768493179625201819923177897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b2b329a999a7b1e62b4f466f4d41fb38a1dc4b1e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspec-formation.deve-resd.comcast.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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