320749-mqtttestgw.ddm.iot-accelerator.ericsson.net

- Ericsson -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 01:28:eb:41:ec:7d:65:66:d2:9e:ed:cf:0a:ea:c8:3f was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ericsson

Organization: Ericsson
Organization unit: IT
State / Province: Stockholm
Locality: Stockholm
Country: SE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:28:eb:41:ec:7d:65:66:d2:9e:ed:cf:0a:ea:c8:3f
Serial Number (int): 1541691459403787448825357584067905599
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: b0:7f:af:e7:b2:67:7d:93:84:76:29:9f:e5:1d:c6:da:0c:15:9f:98
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 1e:51:be:61:9f:35:bc:52:27:18:45:9e:74:89:5b:4b:94:35:be:50
Fingerprint (sha256): 02:ca:86:27:1e:cf:45:3d:56:fe:7d:b7:c7:58:18:40:ba:88:99:d3:3a:8b:3a:53:7b:0b:bf:0c:99:f5:2d:7c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate 320749-mqtttestgw.ddm.iot-accelerator.ericsson.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 320749-mqtttestgw.ddm.iot-accelerator.ericsson.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

320749-mqtttestgw.ddm.iot-accelerator.ericsson.net

Other certificates including the domain name ericsson.net

(limited to 100 certificates)
sfn-acc.ericsson.net
wfmuat-loadtest-so4-vip.uat.sdt.ericsson.net
sitehandler-na3.ericsson.net
p437.clm.ericsson.net
*.ericsson.net
sitehandler-anza.ericsson.net
bbcclient20.be.bbc.cleanfeed.ptp.ebms.ericsson.net
stg.mm.ebms.ericsson.net
prism.msts.ericsson.net
loginppd.ericsson.net
login.ericsson.net
callme.cct.ericsson.net
sitehandler-apac2.ericsson.net
m5.ericsson.net
myaccount-dev.ericsson.net
iot-mqttp.ericsson.net
availabilitytracker.emps.ebsd.ericsson.net
att-m.c3.ericsson.net
reports.siterollout.ericsson.net
news.internal.ericsson.net
swgwacc.ericsson.net
dock.xcs.c3.ericsson.net
access.us.msdp.ericsson.net
nels1.vims.live.ericsson.net
ctrl-comcastvran.live.ericsson.net
www.11001.sitestatustool.ericsson.net
hwsonline-apprd.ebusiness.sam.ericsson.net
ideaboxes.ericsson.net
sm2.prod.dcp.ericsson.net
ctrl-5gott.lab.ericsson.net
emftacc.ericsson.net
atlas.10010.gtec.seln.ete.ericsson.net
test.ericsson.net
lu.test.seb.cct.ericsson.net
tasks.mm.ebms.ericsson.net
gtec10009box5cic.ericsson.net
seg1-sweden.ericsson.net
ee.test.seb.cct.ericsson.net
crmbridge.emps.ebsd.ericsson.net
sitehandler-apac3.ericsson.net
sitehandler-na3.ericsson.net
fiber.eams.ericsson.net
itsm-prod.ericsson.net
origin-ep.ebusiness.sam.ericsson.net
cis.bscs.ericsson.net
ep-f75.wam.ebusiness.ericsson.net
ahot4.ericsson.net
*.eightfold.ai
restapi.ericsson.net
fss2.ericsson.net
origin-srm-q.wam.ebusiness.ericsson.net
emp-prod-acc-we.ebsd.ericsson.net
tapp-test.lss.ericsson.net
origin-srm.wam.ebusiness.ericsson.net
kpn-wgp.ptt.ericsson.net
sitehandler-apac2.ericsson.net
dashboard.edit.ptp.ebms.ericsson.net
sitehandler-emea3.ericsson.net
sitehandler-na3.ericsson.net
mplatform.dev.sdt.ericsson.net
elis-acc.ericsson.net
webcom.live.ericsson.net
ls3.elk.jp.qa.vcc.cvc.ericsson.net
acc.lar.ericsson.net
ebusiness.ericsson.net
gtec10009box9cic.ericsson.net
golsacc.ericsson.net
test.play.ericsson.net
opuniverse.dcp.ericsson.net
nim.edr.va.preprod.sdt.ericsson.net
edcatest.live.ericsson.net
cdn.dev.mm.ebms.ericsson.net
bbcclient14.cf.bbc.cleanfeed.ptp.ebms.ericsson.net
chatbotpilot1.ericsson.net
ctrl-rkvran04.live.ericsson.net
bssug.ericsson.net
*.mhealth.ericsson.net
sesbmg14.ericsson.net
server.gocd.eu.demo.vcc.cvc.ericsson.net
sbiotpfkanshimqttgw.ddm.iot-accelerator.ericsson.net
ericsson.co.gg
e025clxcol001p.celmys.ericsson.net
320749-mqtttestgw.ddm.iot-accelerator.ericsson.net
customer-native.rijeen.mash-up.c3.ericsson.net
ssl363782.cloudflaressl.com
bbcclient18.be.bbc.cleanfeed.ptp.ebms.ericsson.net
rnea1.cas.ericsson.net
operator.mdi-us.ericsson.net
atlas.5gctbe2e.live.ericsson.net
wcm.ericsson.net
cic.docomo-vran1.live.ericsson.net
bbc_client_04.cf.bbc.cleanfeed.ptp.ebms.ericsson.net
onetm.se.msdp.ericsson.net
swctools.ericsson.net
itteinnovationaccept.ericsson.net
sitehandler-emea4.ericsson.net
development.licensegateway.ericsson.net
hwsonline.amcs.ebusiness.sam.ericsson.net
logintest.cloud.ebms.ericsson.net
acc.wam-proxy.us.ericsson.net

Certificate

The complete raw certificate details for 320749-mqtttestgw.ddm.iot-accelerator.ericsson.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc32wVrGQ9udr0MrhAqQ
jcuABfHrtBjyqyK6iVo/rSa0ecL+mS79HJ9Suivki/1ivuwXC4p3dGMUsHPbb3A0
YUHcW0aD6n/5QHzjPcDzo3/9TxKnkaZKb5U4iFfIFWPSuJYMLp8d+pMPkIrh/CiC
VOtI2yN4HSo3NakqrsAQRrWHeozjIM6iCc9yWLy7W1WqHusOb66Jf1FkiJ8MUvYX
zyHevScGymbJ6XTmx1yzRbKSZc9aXo9pELWuldbt8RaKVY2qHPD59NQOKG1T9UD7
/U68mdAah2uQMvc6RkmDpw7t9PbSxt4WzXQAnZbERV+cJL9OUD6q1xUHN0eLap8t
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1541691459403787448825357584067905599
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stockholm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stockholm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ericsson'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '320749-mqtttestgw.ddm.iot-accelerator.ericsson.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23960604217050980241173931499206110781280157845495626263813435627547192480601849971918375446930953956156080600773400387613621809534098626444489921719137404633449490336862548371398644732400684714963961950812829538157048869720899828405716101715461629498904325361644066807196559471389280733978447912248027384257070473966797607361095483198234601020494015805856627262124825752422483270051827790429869615444036359798128940491559474902908603228375505328261068836753280696240419694181076357664559987694064733338800831556638648235761913828532805292961891187389286641737378451113705506332576001868029170379963695451884744551701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b07fafe7b2677d938476299fe51dc6da0c159f98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '320749-mqtttestgw.ddm.iot-accelerator.ericsson.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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