chm11ztest.secure.ne.jp
Issued by KDDI Web Communications Certification Authority 2
About this certificate
This digital certificate with serial number 4a:63:09:ec:6e:6a:91:cb was issued on by KDDI Web Communications Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)
Certificate Subject
CN=chm11ztest.secure.ne.jp
KDDI Web Communications Inc.
Organization:
KDDI Web Communications Inc.
Country:
JP
This certificate has expire since
Certificate Details
Serial Number (hex): 4a:63:09:ec:6e:6a:91:cbSerial Number (int): 5360138892570431947
Serial Number lenght: 63 bits, 8 octets
SubjectKeyId: 63:d4:dd:70:74:d7:12:f5:28:0b:da:8e:fe:dd:48:a3:78:7d:a1:88
AuthorityKeyId: 09:91:88:db:80:ba:6b:cb:86:aa:3d:9d:ec:47:ee:1c:3c:33:96:78
Fingerprint (sha1): 27:dc:df:00:51:29:63:b1:68:b1:4d:a7:4d:9a:49:e7:76:4d:5c:ac
Fingerprint (sha256): 03:5f:3f:dc:8c:e2:a4:23:8e:27:ee:51:f3:f5:31:38:c8:dc:e0:c7:be:b2:60:e3:dd:db:b0:96:d4:ac:7f:c7
Revocation information
OCSP Server: http://kddiweb2.ocsp.secomtrust.netCRL Distribution Point: http://repo1.secomtrust.net/sppca/kddiweb2/fullCRL.crl
Check the revocation status for certificate chm11ztest.secure.ne.jp
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for chm11ztest.secure.ne.jp
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
chm11ztest.secure.ne.jp
Other certificates including the domain name secure.ne.jp
(limited to 100 certificates)
x173.secure.ne.jp
s190.secure.ne.jp
s127.secure.ne.jp
x347.secure.ne.jp
xb202.secure.ne.jp
x480.secure.ne.jp
staging.sr.secure.ne.jp
xb301.secure.ne.jp
x346.secure.ne.jp
m209.secure.ne.jp
x130.secure.ne.jp
g302.secure.ne.jp
xa124.secure.ne.jp
z106.secure.ne.jp
xa131.secure.ne.jp
x346.secure.ne.jp
x266.secure.ne.jp
s118.secure.ne.jp
aa222.secure.ne.jp
m211.secure.ne.jp
s208.secure.ne.jp
s402.secure.ne.jp
gt201.secure.ne.jp
s102001.secure.ne.jp
s301.secure.ne.jp
z143.secure.ne.jp
cvps-158-199-195-137.secure.ne.jp
s138.secure.ne.jp
s125.secure.ne.jp
gt161.secure.ne.jp
g630.secure.ne.jp
x156.secure.ne.jp
xb102.secure.ne.jp
xa130.secure.ne.jp
g640.secure.ne.jp
aa107.secure.ne.jp
m204.secure.ne.jp
x601.secure.ne.jp
x176.secure.ne.jp
m128.secure.ne.jp
z203.secure.ne.jp
x180.secure.ne.jp
s105.secure.ne.jp
gt161.secure.ne.jp
chm11ztest.secure.ne.jp
aa118.secure.ne.jp
gt401.secure.ne.jp
s129.secure.ne.jp
xa109.secure.ne.jp
s204.secure.ne.jp
xa113.secure.ne.jp
g108.secure.ne.jp
s128.secure.ne.jp
x190.secure.ne.jp
m123.secure.ne.jp
xa113.secure.ne.jp
xb106.secure.ne.jp
gt106.secure.ne.jp
s120.secure.ne.jp
x106.secure.ne.jp
zz131.secure.ne.jp
x441.secure.ne.jp
z301.secure.ne.jp
xa132.secure.ne.jp
x270.secure.ne.jp
xa120.secure.ne.jp
s302.secure.ne.jp
xb116.secure.ne.jp
xb203.secure.ne.jp
g402.secure.ne.jp
s126.secure.ne.jp
gt302.secure.ne.jp
gt109.secure.ne.jp
aa194.secure.ne.jp
x150.secure.ne.jp
aa156.secure.ne.jp
*.secure.ne.jp
x279.secure.ne.jp
gt503.secure.ne.jp
xa138.secure.ne.jp
information.secure.ne.jp
g643.secure.ne.jp
s109.secure.ne.jp
s121.secure.ne.jp
gt401.secure.ne.jp
x250.secure.ne.jp
x274.secure.ne.jp
x173.secure.ne.jp
x280.secure.ne.jp
z141.secure.ne.jp
z303.secure.ne.jp
m117.secure.ne.jp
g636.secure.ne.jp
gt161.secure.ne.jp
s108.secure.ne.jp
xa112.secure.ne.jp
m139.secure.ne.jp
g109.secure.ne.jp
g303.secure.ne.jp
s106.secure.ne.jp
s190.secure.ne.jp
s127.secure.ne.jp
x347.secure.ne.jp
xb202.secure.ne.jp
x480.secure.ne.jp
staging.sr.secure.ne.jp
xb301.secure.ne.jp
x346.secure.ne.jp
m209.secure.ne.jp
x130.secure.ne.jp
g302.secure.ne.jp
xa124.secure.ne.jp
z106.secure.ne.jp
xa131.secure.ne.jp
x346.secure.ne.jp
x266.secure.ne.jp
s118.secure.ne.jp
aa222.secure.ne.jp
m211.secure.ne.jp
s208.secure.ne.jp
s402.secure.ne.jp
gt201.secure.ne.jp
s102001.secure.ne.jp
s301.secure.ne.jp
z143.secure.ne.jp
cvps-158-199-195-137.secure.ne.jp
s138.secure.ne.jp
s125.secure.ne.jp
gt161.secure.ne.jp
g630.secure.ne.jp
x156.secure.ne.jp
xb102.secure.ne.jp
xa130.secure.ne.jp
g640.secure.ne.jp
aa107.secure.ne.jp
m204.secure.ne.jp
x601.secure.ne.jp
x176.secure.ne.jp
m128.secure.ne.jp
z203.secure.ne.jp
x180.secure.ne.jp
s105.secure.ne.jp
gt161.secure.ne.jp
chm11ztest.secure.ne.jp
aa118.secure.ne.jp
gt401.secure.ne.jp
s129.secure.ne.jp
xa109.secure.ne.jp
s204.secure.ne.jp
xa113.secure.ne.jp
g108.secure.ne.jp
s128.secure.ne.jp
x190.secure.ne.jp
m123.secure.ne.jp
xa113.secure.ne.jp
xb106.secure.ne.jp
gt106.secure.ne.jp
s120.secure.ne.jp
x106.secure.ne.jp
zz131.secure.ne.jp
x441.secure.ne.jp
z301.secure.ne.jp
xa132.secure.ne.jp
x270.secure.ne.jp
xa120.secure.ne.jp
s302.secure.ne.jp
xb116.secure.ne.jp
xb203.secure.ne.jp
g402.secure.ne.jp
s126.secure.ne.jp
gt302.secure.ne.jp
gt109.secure.ne.jp
aa194.secure.ne.jp
x150.secure.ne.jp
aa156.secure.ne.jp
*.secure.ne.jp
x279.secure.ne.jp
gt503.secure.ne.jp
xa138.secure.ne.jp
information.secure.ne.jp
g643.secure.ne.jp
s109.secure.ne.jp
s121.secure.ne.jp
gt401.secure.ne.jp
x250.secure.ne.jp
x274.secure.ne.jp
x173.secure.ne.jp
x280.secure.ne.jp
z141.secure.ne.jp
z303.secure.ne.jp
m117.secure.ne.jp
g636.secure.ne.jp
gt161.secure.ne.jp
s108.secure.ne.jp
xa112.secure.ne.jp
m139.secure.ne.jp
g109.secure.ne.jp
g303.secure.ne.jp
s106.secure.ne.jp
Certificate
The complete raw certificate details for chm11ztest.secure.ne.jp in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEoTCCA4mgAwIBAgIISmMJ7G5qkcswDQYJKoZIhvcNAQELBQAwcDELMAkGA1UE BhMCSlAxJTAjBgNVBAoTHEtEREkgV2ViIENvbW11bmljYXRpb25zIEluYy4xOjA4 BgNVBAMTMUtEREkgV2ViIENvbW11bmljYXRpb25zIENlcnRpZmljYXRpb24gQXV0 aG9yaXR5IDIwHhcNMTgwOTA3MDMzMzI2WhcNMTkwOTA3MDM0MzI1WjAiMSAwHgYD VQQDExdjaG0xMXp0ZXN0LnNlY3VyZS5uZS5qcDCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALUpPDzAl4AnvWSbFiR63BpRP4UtI4sY7dbp6T5YAS8N07mz /XirovkFKrii8cwqqc4gYqfmWxn6Zk5/wFs8USqLFH7Wrk7XjNs8+Bj2vLlRUCEs b1118mDqgO5RzotwlLsi7UMEJspJn/YM7WfmAdwT9hpSbj1MVGbYwUNKUjQKNY1a Fkwy4HX7SW8WD8UVN6+HFz0KJNky+yV5RmXg07SWtdh3WGEAS74+f45yon1I9AWf kL8VWpm5GO1sBxxxvSx0RvB/EtcoKBssfrPpe8a5bMu7VdXrZiZJMAKepWqBsLiF bgGGncPnjm+Uw/IAfDMjJo6oYHNGW48UxTffITECAwEAAaOCAYswggGHMB8GA1Ud IwQYMBaAFAmRiNuAumvLhqo9nexH7hw8M5Z4MD8GCCsGAQUFBwEBBDMwMTAvBggr BgEFBQcwAYYjaHR0cDovL2tkZGl3ZWIyLm9jc3Auc2Vjb210cnVzdC5uZXQwIgYD VR0RBBswGYIXY2htMTF6dGVzdC5zZWN1cmUubmUuanAwXQYDVR0gBFYwVDBIBgoq gwiMmxtugQ0DMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vcmVwbzEuc2Vjb210cnVz dC5uZXQvc3BwY2Eva2RkaXdlYjIvMAgGBmeBDAECATATBgNVHSUEDDAKBggrBgEF BQcDATBHBgNVHR8EQDA+MDygOqA4hjZodHRwOi8vcmVwbzEuc2Vjb210cnVzdC5u ZXQvc3BwY2Eva2RkaXdlYjIvZnVsbENSTC5jcmwwHQYDVR0OBBYEFGPU3XB01xL1 KAvajv7dSKN4faGIMA4GA1UdDwEB/wQEAwIFoDATBgorBgEEAdZ5AgQDAQH/BAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAYxtRQbXNqEfd3GRIpzubmUI5Ra46XCXpD9KE guoweKKO5WQiJhs+dOjXjcsvNNBSyUb+BbbAz/EakSrvgprKI//+wjRS+xV50hef Yt17Ivmyw3hJ93nvWwJ7wUFKj6Cd6b5vYmTEwnE7mX2j7ZbfWBMQr/v6w2fslw60 VZiR/Lp9E8py76tXRQ3c4rMktME0iBwH+bzYKQEls1U3RYZthkO55boiAGVDy3dD +U4j3UujLqh7kSyqDGA/yEzLb7ron37KG4hPUmZJ2ZjESczJNmQNH6SoVcjGDNJ6 FN3ldwtWIBWGdedOsSCD6ITM6EepqDZl5fB4DJ1yhUGI+aAcJw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSk8PMCXgCe9ZJsWJHrc GlE/hS0jixjt1unpPlgBLw3TubP9eKui+QUquKLxzCqpziBip+ZbGfpmTn/AWzxR KosUftauTteM2zz4GPa8uVFQISxvXXXyYOqA7lHOi3CUuyLtQwQmykmf9gztZ+YB 3BP2GlJuPUxUZtjBQ0pSNAo1jVoWTDLgdftJbxYPxRU3r4cXPQok2TL7JXlGZeDT tJa12HdYYQBLvj5/jnKifUj0BZ+QvxVambkY7WwHHHG9LHRG8H8S1ygoGyx+s+l7 xrlsy7tV1etmJkkwAp6laoGwuIVuAYadw+eOb5TD8gB8MyMmjqhgc0ZbjxTFN98h MQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5360138892570431947 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KDDI Web Communications Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KDDI Web Communications Certification Authority 2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-07 03:33:26 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-07 03:43:25 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chm11ztest.secure.ne.jp' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22869467084130401750917799877037034721230764589106534109979023390259440952053786820948038773738782216142315608346708612549439198577929394021994364636114037649489726263280403864981675320436577697549362144134107165109740546659682290680530283910476250205542253628754336639224209802529091993529025361642992813465296358669284869894725066271214636230326759550499620660263943295446874263579922436673867788304860509241908409815315430621905481512566458265762668582339361183876075902345595295259799004483615552688046949015728147167079538769616533345378708392313008220731010979502407954296251920804437509521776088066198127714609 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 099188db80ba6bcb86aa3d9dec47ee1c3c339678 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://kddiweb2.ocsp.secomtrust.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chm11ztest.secure.ne.jp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.110.141.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/kddiweb2/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/kddiweb2/fullCRL.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 63d4dd7074d712f5280bda8efedd48a3787da188 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00631b5141b5cda847dddc6448a73b9b99423945ae3a5c25e90fd28482ea3078a28ee56422261b3e74e8d78dcb2f34d052c946fe05b6c0cff11a912aef829aca23fffec23452fb1579d2179f62dd7b22f9b2c37849f779ef5b027bc1414a8fa09de9be6f6264c4c2713b997da3ed96df581310affbfac367ec970eb4559891fcba7d13ca72efab57450ddce2b324b4c134881c07f9bcd8290125b3553745866d8643b9e5ba22006543cb7743f94e23dd4ba32ea87b912caa0c603fc84ccb6fbae89f7eca1b884f526649d998c449ccc936640d1fa4a855c8c60cd27a14dde5770b5620158675e74eb12083e884cce847a9a83665e5f0780c9d72854188f9a01c27