3b7cc1e5.evoyageurs-tech-dev.aws.vsct.fr

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 06:77:dc:59:09:cc:9a:95:7f:87:e5:82:d1:dd:c2:3b was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=3b7cc1e5.evoyageurs-tech-dev.aws.vsct.fr

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:77:dc:59:09:cc:9a:95:7f:87:e5:82:d1:dd:c2:3b
Serial Number (int): 8597720485327122820023570438505218619
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: aa:d7:2e:00:cd:fc:e3:cb:87:ee:4c:f5:7d:fd:8e:62:e6:2e:d4:91
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 9d:8c:cd:2a:d8:03:4e:e6:71:7f:cb:b1:73:32:3f:21:8e:31:26:33
Fingerprint (sha256): 02:d0:4b:21:96:03:5f:10:de:2d:5f:56:47:2a:f8:e8:17:79:d0:2f:8f:ca:c6:b0:a3:ec:e0:8f:c6:eb:0f:88

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate 3b7cc1e5.evoyageurs-tech-dev.aws.vsct.fr

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 3b7cc1e5.evoyageurs-tech-dev.aws.vsct.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3b7cc1e5.evoyageurs-tech-dev.aws.vsct.fr
*.ivts-60610m.storybook-flutter-inv.evoyageurs-tech-dev.aws.vsct.fr
ivts-60610m.storybook-flutter-inv.evoyageurs-tech-dev.aws.vsct.fr

Other certificates including the domain name vsct.fr

(limited to 100 certificates)
ivts-51182.master.connect-api.evoyageurs-dev.aws.vsct.fr
ivts-31165m.connect-api.evoyageurs-tech-dev.aws.vsct.fr
env-mabm.device-info-invictus.evoyageurs-dev.aws.vsct.fr
ivts-51725m.connect-api.evoyageurs-dev.aws.vsct.fr
ivts-59210.master.connect-api.evoyageurs-dev.aws.vsct.fr
ivts-58400m.device-info-invictus.evoyageurs-dev.aws.vsct.fr
*.transilien-dev.aws.vsct.fr
ivts-50080.master.connect-api.evoyageurs-dev.aws.vsct.fr
2024b071.evoyageurs-tech-dev.aws.vsct.fr
ivts-59531.master.connect-api.evoyageurs-dev.aws.vsct.fr
c44a0fc7.evoyageurs-tech-dev.aws.vsct.fr
4dcd83c9.evoyageurs-tech-dev.aws.vsct.fr
ivts-48869m.web-react-invictus.evoyageurs-dev.aws.vsct.fr
ivts-61227m.storybook-react-inv.evoyageurs-dev.aws.vsct.fr
ivts-46924.master.connect-api.evoyageurs-dev.aws.vsct.fr
psct-54623m.api.platform-scts-dev.aws.vsct.fr
2f276c02.evoyageurs-tech-dev.aws.vsct.fr
415e94ba.evoyageurs-tech-dev.aws.vsct.fr
det-production.euronet.vsct.fr
ivts-47227.master.connect-api.evoyageurs-dev.aws.vsct.fr
recette1.drd-mpd.vsct.fr
psct-44396m.api.platform-scts-dev.aws.vsct.fr
ivts-50802m.web-react-invictus.evoyageurs-dev.aws.vsct.fr
ivts-49942c.storybook-react-inv.evoyageurs-dev.aws.vsct.fr
ivts-10251m.web-react-invictus.evoyageurs-dev.aws.vsct.fr
e1b508cf.evoyageurs-tech-dev.aws.vsct.fr
ivts-30310m.device-info-invictus.evoyageurs-dev.aws.vsct.fr
3b7cc1e5.evoyageurs-tech-dev.aws.vsct.fr
ivts-29049m.storybook-react-inv.evoyageurs-dev.aws.vsct.fr
prod1.transilien.vsct.fr
psct-60159m.api.platform-scts-dev.aws.vsct.fr
*.eu-west-1.transverse.aws.vsct.fr
b79ccdc6.evoyageurs-tech-dev.aws.vsct.fr
env-brem.connect-api.evoyageurs-tech-dev.aws.vsct.fr
ivts-57159m.galileo-admin-invictus.evoyageurs-dev.aws.vsct.fr
ivts-24249m.storybook-flutter-inv.evoyageurs-dev.aws.vsct.fr
ivts-28645m.web-react-invictus.evoyageurs-dev.aws.vsct.fr
3b83023f.evoyageurs-tech-dev.aws.vsct.fr
ivts-50471m.connect-api.evoyageurs-tech-dev.aws.vsct.fr
recette-transilien-cpt.vsct.fr
*.evtech-inno-prod.aws.vsct.fr
ivts-28017m.web-react-invictus.evoyageurs-dev.aws.vsct.fr
vpn1-production1.euronet.vsct.fr
ivts-58833m.device-info-invictus.evoyageurs-dev.aws.vsct.fr
ivts-48656m.connect-api.evoyageurs-tech-dev.aws.vsct.fr
e28d159b.evoyageurs-tech-dev.aws.vsct.fr
ivts-28435m.storybook-flutter-inv.evoyageurs-dev.aws.vsct.fr
renovate-5bb6956c.flex-aftersales.evoyageurs-dev.aws.vsct.fr
ocebo.vsct.fr
ws-rec3-csm.vsct.fr
ivts-50812m.connect-api.evoyageurs-dev.aws.vsct.fr
ivts-51702.master.connect-api.evoyageurs-dev.aws.vsct.fr
*.ouicloud-dev.aws.vsct.fr
ivts-22335m.device-info-invictus.evoyageurs-dev.aws.vsct.fr
f5602639.platform-scts-dev.aws.vsct.fr
ivts-48203.master.connect-api.evoyageurs-dev.aws.vsct.fr
ivts-58400m.galileo-admin-invictus.evoyageurs-dev.aws.vsct.fr
ivts-41496c.connect-api.evoyageurs-dev.aws.vsct.fr
*.evtechbigdata-dev.aws.vsct.fr
87ddba25.evoyageurs-tech-dev.aws.vsct.fr
psct-30310m.api.platform-scts-dev.aws.vsct.fr
sncf.com
2e2b9f9d.evoyageurs-tech-dev.aws.vsct.fr
recette.pepita.vsct.fr
a157e603.platform-scts-tech-dev.aws.vsct.fr
df32b4ed.evoyageurs-tech-dev.aws.vsct.fr
ivts-50712.master.connect-api.evoyageurs-dev.aws.vsct.fr
ivts-34685.master.connect-api.evoyageurs-dev.aws.vsct.fr
ivts-27729m.storybook-flutter-inv.evoyageurs-dev.aws.vsct.fr
psct-41496c.api.platform-scts-dev.aws.vsct.fr
*.vsct.fr
sncf.com
ivts-51650.master.connect-api.evoyageurs-dev.aws.vsct.fr
krum.vsct.fr
www.recette1.eurostar.vsct.fr
ivts-59437m.rc-andora-front.evoyageurs-dev.aws.vsct.fr
integration1.pao.vsct.fr
psct-47940m.api.platform-scts-tech-dev.aws.vsct.fr
ivts-29130m.galileo-admin-invictus.evoyageurs-dev.aws.vsct.fr
env-era.master.connect-api.evoyageurs-dev.aws.vsct.fr
ivts-31169c.galileo-admin-invictus.evoyageurs-dev.aws.vsct.fr
ivts-39855m.storybook-flutter-inv.evoyageurs-dev.aws.vsct.fr
api.maas-dev.aws.vsct.fr
*.ouitaas-dev.aws.vsct.fr
195df6ea.payg-dev.aws.vsct.fr
admins.voyages-sncf.com
env-zyac.device-info-invictus.evoyageurs-dev.aws.vsct.fr
c270e1de.evoyageurs-tech-dev.aws.vsct.fr
thalysmobile.vsct.fr
ivts-29048m.device-info-invictus.evoyageurs-dev.aws.vsct.fr
rec.wshoraires.vsct.fr
1ebbab06.evoyageurs-tech-dev.aws.vsct.fr
ivts-47441.master.connect-api.evoyageurs-dev.aws.vsct.fr
env-zzhc.device-info-invictus.evoyageurs-dev.aws.vsct.fr
ivts-29048m.storybook-flutter-inv.evoyageurs-dev.aws.vsct.fr
usine.idpass.sncf.com
env-aco.master.connect-api.evoyageurs-dev.aws.vsct.fr
ivts-50785.master.connect-api.evoyageurs-dev.aws.vsct.fr
2024b071.evoyageurs-tech-dev.aws.vsct.fr
api.transilien.vsct.fr

Certificate

The complete raw certificate details for 3b7cc1e5.evoyageurs-tech-dev.aws.vsct.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbxnGfNvU5HcQXOrJvWs
53EPZZ0l3GQtQLcu4qH04uf1q8nZuTmqSOYY55Rm6n26Gk+LhKEI7/a1MPdpiY8H
GDhZkUSkacZpaCfwoOe4N6wbdwwANwDTaoJPJ/vS6EKU1M7wPvki6jaaB6G+xajy
5ztGFHAZ2t3IeoI2/owojIbRNk8TFPSB35Zhe9c0EMkd0S8wwMBFtfwFGbbnwyFF
hBekmetfn+R07Monf6qavt6WsCdS/B70h9rGVzmCwgwP4Pn9LThMkua8xjvHLBNJ
6SSyIe5TC7VGNDWhk0wgll/85zPi3AmY4gB3rKiGECVj6cqzYViUN15bEh/EbvAn
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8597720485327122820023570438505218619
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3b7cc1e5.evoyageurs-tech-dev.aws.vsct.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22437084832564341433313791422361955077090725434556767603422313890527857290848125472157925436334892974636943869676145135249319216640208431368348539125388543759346345143772090370950026161623509228756294933824558898312121738914822885207002926913568925984982721397352968204768000671943071806421109069203152395461667439959829765853205979615072755434195817898796784017511481454905116976606635037479300247108790976220137806016653485005829623575061862556240634247822454184714581945589509901576673576993036137351346121890432073634843874881213497701082687973999418399994278859756939315783512823546475194179870689686835919071073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aad72e00cdfce3cb87ee4cf57dfd8e62e62ed491
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (181 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3b7cc1e5.evoyageurs-tech-dev.aws.vsct.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ivts-60610m.storybook-flutter-inv.evoyageurs-tech-dev.aws.vsct.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivts-60610m.storybook-flutter-inv.evoyageurs-tech-dev.aws.vsct.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00562e5d3fc23ad498eb2b09247a734b55dfefc4a3984f384055ffe457ec097ccfe048c1eb679de37a04adb68d473174e6c46957158e416937392a6daf39aedbade2e6acf4aa991377b4634686fd7fbab2a23d02f95b5c70a74cd9c5f978ef0f459632cfc08eb860a2ca2a2e2dccad3e3a4309c768f964a3ac25df53f87c45cdc4f2f7a23ecab24c01f22a01f1ce64f6c6a645d6700572aec79d4033c2eeb113dfc25947b5f794c9cd6043a5c9099b3b3098866aaf5ee5ba07df0fb3bfab21742818d4b9045428c303d675031272da8aac5b2b54aa166aa6d8c37690f439a27dbeffcba8a5d3dffbd26122d817dc8585dd369b9ef5dc0943b33212e891a9eb33d4