apidownload.dev.mpp2.aws.nasdaq.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0f:a6:28:db:ce:1d:8b:75:92:39:55:8f:d0:40:23:06 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=apidownload.dev.mpp2.aws.nasdaq.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0f:a6:28:db:ce:1d:8b:75:92:39:55:8f:d0:40:23:06Serial Number (int): 20801169926431885620312689958478422790
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 1b:20:4a:8d:88:65:de:9f:1d:6a:37:25:00:03:b3:38:94:bd:07:af
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 29:1e:17:ce:a4:f9:80:14:43:60:94:0d:86:f4:48:99:44:b0:15:ae
Fingerprint (sha256): 03:f4:8b:56:cf:f6:8e:de:e8:b9:90:15:a8:36:e2:a2:c5:46:d2:9d:04:1d:23:fc:a9:85:83:03:c3:c1:c7:5b
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate apidownload.dev.mpp2.aws.nasdaq.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for apidownload.dev.mpp2.aws.nasdaq.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
apidownload.dev.mpp2.aws.nasdaq.com
Other certificates including the domain name nasdaq.com
(limited to 100 certificates)
midev.nasdaq.com
leapfrog-ssl.nasdaq.com
incapsula.com
incapsula.com
platform-status.buckzy.net
access.secureqa.nasdaq.com
globenewswire.com
ssl003.insnw.net
incapsula.com
incapsula.com
incapsula.com
teleport.demo.ume.nff.aws.exchsys.nasdaq.com
incapsula.com
incapsula.com
incapsula.com
listingcenter.nasdaq.com
incapsula.com
irintelligence.nasdaqomx.com
imperva.com
incapsula.com
imperva.com
teleport.eks.uat.ums-atris.aws.nasdaq.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl.nasdaq.com
nfn.analytics.nasdaq.com
imperva.com
ssl003.insnw.net
www.nasdaq.com
test.dev.mdic.aws.nasdaq.com
qc.globenewswire.com
newsclient.news.eu.nasdaq.com
teleport.iri.uat.irinsight.aws.nasdaq.com
*.rpxnow.com
imperva.com
platform-status.buckzy.net
incapsula.com
incapsula.com
incapsula.com
imperva.com
gjma.nasdaq.com
docs.data.nasdaq.com
imperva.com
incapsula.com
imperva.com
sp.nasdaq.com
incapsula.com
*.ingress.ops.amgmktums1.aws.nasdaq.com
business.nasdaq.com
estonia-evoting.nasdaq.com
incapsula.com
mvrcheck.io
incapsula.com
incapsula.com
incapsula.com
incapsula.com
apidownload.dev.mpp2.aws.nasdaq.com
leapfrog-ssl.nasdaq.com
incapsula.com
imperva.com
ssl003.insnw.net
ssl003.insnw.net
incapsula.com
incapsula.com
incapsula.com
leapfrog-ssl.nasdaq.com
incapsula.com
incapsula.com
us18usfpoccmq02.tss.nasdaq.com
leapfrog-ssl-38.gcs-web.com
boardvantage.nasdaq.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
authorization.mojoportal.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
nasdaq.com
teleport.eks.pro.ums-cix.aws.nasdaq.com
mvrcheck.io
www.nasdaq.com
teleport.qa.inet.aws.exchsys.nasdaq.com
platform-status.buckzy.net
access1.eu.secureweb.nasdaq.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
boardvantage.nasdaq.com
saml.portal.na.nasdaq.com
ndeuat.nasdaq.com
incapsula.com
platform-status.buckzy.net
incapsula.com
*.poc.nffume.aws.nasdaq.com
leapfrog-ssl.nasdaq.com
incapsula.com
incapsula.com
platform-status.buckzy.net
access.secureqa.nasdaq.com
globenewswire.com
ssl003.insnw.net
incapsula.com
incapsula.com
incapsula.com
teleport.demo.ume.nff.aws.exchsys.nasdaq.com
incapsula.com
incapsula.com
incapsula.com
listingcenter.nasdaq.com
incapsula.com
irintelligence.nasdaqomx.com
imperva.com
incapsula.com
imperva.com
teleport.eks.uat.ums-atris.aws.nasdaq.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl.nasdaq.com
nfn.analytics.nasdaq.com
imperva.com
ssl003.insnw.net
www.nasdaq.com
test.dev.mdic.aws.nasdaq.com
qc.globenewswire.com
newsclient.news.eu.nasdaq.com
teleport.iri.uat.irinsight.aws.nasdaq.com
*.rpxnow.com
imperva.com
platform-status.buckzy.net
incapsula.com
incapsula.com
incapsula.com
imperva.com
gjma.nasdaq.com
docs.data.nasdaq.com
imperva.com
incapsula.com
imperva.com
sp.nasdaq.com
incapsula.com
*.ingress.ops.amgmktums1.aws.nasdaq.com
business.nasdaq.com
estonia-evoting.nasdaq.com
incapsula.com
mvrcheck.io
incapsula.com
incapsula.com
incapsula.com
incapsula.com
apidownload.dev.mpp2.aws.nasdaq.com
leapfrog-ssl.nasdaq.com
incapsula.com
imperva.com
ssl003.insnw.net
ssl003.insnw.net
incapsula.com
incapsula.com
incapsula.com
leapfrog-ssl.nasdaq.com
incapsula.com
incapsula.com
us18usfpoccmq02.tss.nasdaq.com
leapfrog-ssl-38.gcs-web.com
boardvantage.nasdaq.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
authorization.mojoportal.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
nasdaq.com
teleport.eks.pro.ums-cix.aws.nasdaq.com
mvrcheck.io
www.nasdaq.com
teleport.qa.inet.aws.exchsys.nasdaq.com
platform-status.buckzy.net
access1.eu.secureweb.nasdaq.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
boardvantage.nasdaq.com
saml.portal.na.nasdaq.com
ndeuat.nasdaq.com
incapsula.com
platform-status.buckzy.net
incapsula.com
*.poc.nffume.aws.nasdaq.com
Certificate
The complete raw certificate details for apidownload.dev.mpp2.aws.nasdaq.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEhTCCA22gAwIBAgIQD6Yo284di3WSOVWP0EAjBjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMTIyMDAwMDAwMFoXDTI1MDExODIzNTk1OVowLjEs MCoGA1UEAxMjYXBpZG93bmxvYWQuZGV2Lm1wcDIuYXdzLm5hc2RhcS5jb20wggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF+upHj+tF6Qo8UHWcyPDLfJGj NiW4xUYc8eWPII+w4lao2z4xbHKOYuL2De6Zr3lm8ltdCM20wq+kNdKYqV0E47Zo lBbybObbKiD7TGCD/y7SGPS59JGaJFnE3AvcsyD0qQw33DAitpmDaToqSa4C6gN0 RY4oyAA148FlD/tKCdCCC6/suhGKapMHdebJFrplB/ixlsvA69mFrTWwP7nDJz2t ZVcsIKbz6EhChfw2mSNF1NgQ6RPOLqpalJ9kmrQEpnfzIzhZmZzB9cyjds6nChXe 84HH9e1wYs9qJi3TYjmyF3Qh4ArTaMDiTpfphKaBX9zwn7bQnXlLVG5IjDDbAgMB AAGjggGPMIIBizAfBgNVHSMEGDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNV HQ4EFgQUGyBKjYhl3p8dajclAAOzOJS9B68wLgYDVR0RBCcwJYIjYXBpZG93bmxv YWQuZGV2Lm1wcDIuYXdzLm5hc2RhcS5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEw DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7 BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNv bS9yMm0wMi5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8v b2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9j cnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNlcjAMBgNVHRMBAf8EAjAA MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBV2OUXKHVn pM7n2yuJl0Q4cJ/hLXr0WyBDo2+P0ZEHOiI7JWvy3Q36BGU8toR0rQztCoWiXgbf zkm2pEJsFz3NbKjUqox4+BH3x/P840pD4A+k2J7Bdr5xH27Q2zAzDnJsMZZ4YZdD zy6X6taeXCx5AswMAVLYDhTPpwc/11/y5VdMLNwisKJuYdc2Ch6Btts/w5gDJQNK Z04Tz5VNCqS3WFg322t7KNgV58uPQgQLwKI9arAEZxTBIyeBNUy+vdrAju/dPQXi oZB0LuJ28QhhnIjvGy12An3l7ASYkbmDB5sWwMPs/S0EFzJGAb/6B3zhXoqW5ozT yrNramADIjvV -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfrqR4/rRekKPFB1nMjw y3yRozYluMVGHPHljyCPsOJWqNs+MWxyjmLi9g3uma95ZvJbXQjNtMKvpDXSmKld BOO2aJQW8mzm2yog+0xgg/8u0hj0ufSRmiRZxNwL3LMg9KkMN9wwIraZg2k6Kkmu AuoDdEWOKMgANePBZQ/7SgnQgguv7LoRimqTB3XmyRa6ZQf4sZbLwOvZha01sD+5 wyc9rWVXLCCm8+hIQoX8NpkjRdTYEOkTzi6qWpSfZJq0BKZ38yM4WZmcwfXMo3bO pwoV3vOBx/XtcGLPaiYt02I5shd0IeAK02jA4k6X6YSmgV/c8J+20J15S1RuSIww 2wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20801169926431885620312689958478422790 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-18 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apidownload.dev.mpp2.aws.nasdaq.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24992676952486794332294173565171239374117304948230419621829399125697071231977495792021537335143348553709470095891038078746950379735561171575726751580750245917759368672954333800243249677321635189381774795672831457483183933135165737931526934377194341209202805742530931536808567578795182642590609424075745220845095807119039839056275415529790311900794632305351522829351594145782817263599258471486660583253311743426899764987319740554572302093313353099883804440413349526168500468285640400879469335237383804636443135685991744639161876628378822750992193360442827918560556443792129327912711725826669320714281974629735324201179 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1b204a8d8865de9f1d6a37250003b33894bd07af . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apidownload.dev.mpp2.aws.nasdaq.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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