test-sso.crmondemand.com

- Oracle Corporation -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:01:d5:1f:5c:dc:d3:67:61:4d:b4:2d:59:d3:1f:ca was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oracle Corporation

Organization: Oracle Corporation
Organization unit: Oracle CRMOD SALT-LAKE-CITY
State / Province: California
Locality: Redwood City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:01:d5:1f:5c:dc:d3:67:61:4d:b4:2d:59:d3:1f:ca
Serial Number (int): 17289478880120639833605736574458470346
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 07:8d:c3:79:3f:96:e1:84:e5:ba:1b:c4:85:61:b6:18:45:7b:a2:e8
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): c2:74:a6:70:11:1c:b5:a3:3e:08:35:cc:e1:f0:33:bf:58:37:c7:76
Fingerprint (sha256): 03:26:a0:37:e7:5a:d7:56:d6:29:85:6b:c3:a1:0d:78:df:65:61:0b:dc:f2:72:2f:6f:8a:d7:d7:fc:6e:e8:9d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate test-sso.crmondemand.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test-sso.crmondemand.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test-sso.crmondemand.com

Other certificates including the domain name crmondemand.com

(limited to 100 certificates)
secure-slsomxvea.crmondemand.com
admin-ausomxhia.crmondemand.com
secure-vmsomxmpa.crmondemand.com
secure-ausomxfja-dr.crmondemand.com
secure-ausomxdza.crmondemand.com
secure-rmsomxlqa.crmondemand.com
odmaea.crmondemand.com
secure-ausomxrfa.crmondemand.com
secure-ausomxfya.crmondemand.com
secure-slsomxvra.crmondemand.com
secure-rmsomxjea.crmondemand.com
secure-llsomxwna.crmondemand.com
secure-ausomxdma.crmondemand.com
moddemo.crmondemand.com
secure-slsomxuka.crmondemand.com
secure-vmsomxmna.crmondemand.com
odmagamarketer.crmondemand.com
secure-ausomxaya.crmondemand.com
secure-rmsomxgsa.crmondemand.com
secure-ausomxhla.crmondemand.com
secure-vmsomxlma.crmondemand.com
odmaia.crmondemand.com
admin-ausomxhya.crmondemand.com
secure-ausomxhla.crmondemand.com
secure-rmsomxjya.crmondemand.com
secure-ausomxhna.crmondemand.com
admin-slsomxupa.crmondemand.com
secure-ausomxjka.crmondemand.com
secure-ausomxaha.crmondemand.com
secure-slsomxvea.crmondemand.com
secure-ausomxhma.crmondemand.com
secure-ausomxcsa.crmondemand.com
admin-ausomxbza.crmondemand.com
secure-ausomxega.crmondemand.com
admin-llsomxwla.crmondemand.com
odmstageuser1.crmondemand.com
secure-slsomxtda.crmondemand.com
secure-ausomxcqa.crmondemand.com
secure-rmsomxofa.crmondemand.com
admin-ausomxjla.crmondemand.com
admin-slsomxuga.crmondemand.com
secure-ausomxkva.crmondemand.com
admin-ausomxota.crmondemand.com
emod-ui.crmondemand.com
secure-vmsomxmxa.crmondemand.com
secure-ausomxjta.crmondemand.com
secure-slsomxvha.crmondemand.com
secure-vmsomxmoa.crmondemand.com
secure-vmsomxmta.crmondemand.com
secure-ausomxiha.crmondemand.com
secure-slsomxusa.crmondemand.com
admin-vmsomxmja.crmondemand.com
admin-ausomxfta.crmondemand.com
secure-ausomxnpa.crmondemand.com
secure-ausomxlha.crmondemand.com
admin-ausomxqpa.crmondemand.com
secure-ausomxiia.crmondemand.com
secure-ausomxbfa.crmondemand.com
secure-ausomxgea.crmondemand.com
secure-ausomxpoc.crmondemand.com
secure-ausomxiia.crmondemand.com
secure-ausomxexa.crmondemand.com
secure-ausomxava.crmondemand.com
secure-ausomxava.crmondemand.com
secure-ausomxjqa.crmondemand.com
admin-rmsomxgsa.crmondemand.com
test-sso.crmondemand.com
secure-ausomxfia.crmondemand.com
admin-rmsomxofa.crmondemand.com
secure-ausomxrna.crmondemand.com
test-crmod-ops-tracker.crmondemand.com
secure-ausomxhna.crmondemand.com
secure-ausomxjpa.crmondemand.com
secure-ausomxeca.crmondemand.com
secure-vmsomxmda.crmondemand.com
secure-tvsomxxea.crmondemand.com
secure-ausomxaga.crmondemand.com
secure-vmsomxmqa.crmondemand.com
secure-vmsomxlma.crmondemand.com
test-secure-ausomxbja.crmondemand.com
secure-ausomxjja.crmondemand.com
secure-ausomxooa-dr.crmondemand.com
secure-ausomxdqa.crmondemand.com
admin-ausomxfka.crmondemand.com
secure-ausomxiaa.crmondemand.com
secure-vmsomxmfa.crmondemand.com
admin-slsomxtea.crmondemand.com
secure-vmsomxlxa.crmondemand.com
secure-ausomxdta.crmondemand.com
secure-vmsomxmqa.crmondemand.com
secure-vmsomxkca.crmondemand.com
secure-rmsomxgsa.crmondemand.com
okm-zaba.crmondemand.com
secure-ausomxfba.crmondemand.com
secure-ausomxhha-dr.crmondemand.com
secure-slsomxtea.crmondemand.com
secure-ausomxdba.crmondemand.com
secure-ausomxhoa.crmondemand.com
secure-ausomxida.crmondemand.com
secure-ausomxixa.crmondemand.com

Certificate

The complete raw certificate details for test-sso.crmondemand.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSBV7Lhd+yuRPpQTrNte
dY9GBPFvJrLyHsP6iaS6G3CUXVeB9qnk60ZA/b6bcL4ucDQffVuCdmZeRL0ac6Am
gn04nlMQS7MsHpOWF3GDume7fnyXXeTC2qBKBmrSRe9nkXlTydPu6dSCFJ8x9Mn/
NDMikVcQmawRy6KWIqtQgErI/n0tRBJXhCbWFaSQG/Hn5qRKlJMby7NAlfXZ07Hz
6E3eozIn46eipjQsh8rrGOF93x9eq3GXosxDKxLW5a0ziZMtBR/mGe2quT+KsE3r
G5yYpLKT0WalFw6+gL0otdqF8cXhXQsZK7TE2RJR5foBYvXJkXuXdgDDascFLNuK
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17289478880120639833605736574458470346
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redwood City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oracle Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oracle CRMOD SALT-LAKE-CITY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test-sso.crmondemand.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24884891378320833791700968233316414040144552416734262881755860298040688780046071095548719579213467996105859855535789988817506317626408729072612646188545760953373966362865620534460649838470896571555218788595573671900840651663023759341140259425639703714584678323847456022000214129399489621437837431852356265705797462147632582090539087694373852336325868643393392939363965785838504174167392807012607106846479898242637533595108712253707361247920533155476592849419146985072322047104359034423383619052999322935859369124180090057177446898214037039898720428679415632664299426292472358738354033828966271288712110593618141219341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							078dc3793f96e184e5ba1bc48561b618457ba2e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-sso.crmondemand.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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