sponsor.emc.com

- EMC Corporation -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 25:20:ba:b3:86:d8:31:a2:02:c9:5c:41:88:5a:49:b2 was issued on by thawte, Inc..

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

EMC Corporation

Organization: EMC Corporation
Organization unit: Information Technology
State / Province: Massachusetts
Locality: Hopkinton
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 25:20:ba:b3:86:d8:31:a2:02:c9:5c:41:88:5a:49:b2
Serial Number (int): 49351376095274724723197113305359075762
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 64:a7:25:f5:07:38:f2:c0:61:34:a1:b6:8e:1e:22:cf:2e:aa:3b:3a
Fingerprint (sha256): 04:8b:c4:d7:16:e0:09:c8:c0:96:69:50:40:7d:b8:5b:97:84:41:2a:88:7e:81:3b:6d:c6:3c:80:85:6b:81:59

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate sponsor.emc.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sponsor.emc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

crkgwisepsnpr1.corp.emc.com
crkgwisepsnpr2.corp.emc.com
drmgwisepsnpr1.corp.emc.com
drmgwmntprd01.corp.emc.com
drmgwpanprd01.corp.emc.com
guest.emc.com
hopgwisepsnpr1.corp.emc.com
hopgwmntprd01.corp.emc.com
hopgwpanprd01.corp.emc.com
ban06gwisem1.corp.emc.com
ban06gwisem2.corp.emc.com
ban06gwisep1.corp.emc.com
syd02gwisep1.corp.emc.com
sponsor.emc.com

Other certificates including the domain name emc.com

(limited to 100 certificates)
learningdev54.emc.com
solveonline-test.emc.com
esrs3stg.isus.emc.com
education.emc.com
mcs.emc.com
esr3ghoprd05.emc.com
*.emc.com
thehub-core.corp.emc.com
san3-www.emc.com
vpn-usa-dell-east.emc.com
onwire-qas.emc.com
emcusurvey.emc.com
ngtest-bf.emc.com
interactivedemos.emc.com
sponsor.emc.com
onwire-qav.emc.com
awmagtst.emc.com
tpa-vpn-il.emc.com
capupd-hop1.emc.com
support.emc.com
solveonline-test.emc.com
san2-www.emc.com
wfmmobiletstc.emc.com
vupdate.emc.com
powerstoresizer.emc.com
b2b3.emc.com
cspdbtst.dell.com
vpn-chn.emc.com
psapps.emc.com
edutubecontentstg.dell.com
origin1-sso.emc.com
cxlperf.emc.com
ngssoprddurpks.us.dell.com
www.vmwarelearningplatform.com
emailquarantine.dell.com
apvdiba-secure.emc.com
vupdate.dell.com
solvenginecitest.emc.com
eperoom04.emc.com
meetinghelp.emc.com
playbook.emc.com
wfmmobiletst.emc.com
chat2.emc.com
ftp.emc.com
Proactive.emc.com
licensing-tst.emc.com
dtmsb.emc.com
orgchart-perf.m.emc.com
rplicense.emc.com
youdefine.emc.com
SCL02-01I11-VN03.emc.com
tpa-vpn-usa-east2.emc.com
vendortst.emc.com
orgchart.m.emc.com
eduvdina.emc.com
efravcd.emc.com
fusiontst.emc.com
wfmmobile.emc.com
learningstg.emc.com
fusiontst.emc.com
myvdi.emc.com
apigtwtst.us.dell.com
ngoe-per.emc.com
eperoom04.emc.com
apvdiba.emc.com
ecs-sizer-test.emc.com
eduvdina.emc.com
BAN06-02I01-VN03.emc.com
tpa-vpn-ind.emc.com
edutubecontent.dell.com
*.cf.isus.emc.com
solve.emc.com
learning.emc.com
AcanoUSPool.isus.emc.com
Proactive.emc.com
sponsor.emc.com
education.emc.com
powerlink.emc.com
tabwebsbx01.corp.emc.com
polaris.emc.com
vpn-sin.emc.com
myquotespricing.emc.com
voltage-pp-0000.emc.com
*.svcproxy.iigcloud.lab.emc.com
servicelinkstg.emc.com
fimdevice-tst.emc.com
11iprodsupport.emc.com
vspecialist.emc.com
ssgosgdev.isus.emc.com
lyncap1AE.emc.com
pdg.emc.com
etools.emc.com
edutubestg.delltechnologies.com
edutubecontent.dell.com
ftpapj.dell.com
forms.emc.com
reg.isus.emc.com
orderstatus.emc.com
licensing-uat.m.emc.com
one-per.emc.com

Certificate

The complete raw certificate details for sponsor.emc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxQs54TJCy+v25NLWuUe
tP/c0KFLSeq9RSFQSuJXzM6j1KplZCh6yuEVMnkI3l4z5kAxVorEgjmw4GB8HTE6
cLMfQsW0BB7bTzNk3YTpJqcFZvyd6Tdtdj0KtEIlDu309+4FPCoGQprXEvFHBY2M
1f2BhUQ09wDPUJDb2C3iTmIB1U34DPPA8bqvebM56jjYRG5euNf7FlfW2OOXOA7j
2389npDAiPOZtNExsrRrJbP64C2Wc7b5gqKqOIl/uX86AnAFw0ErmqwVVjFuTNAT
dhL9ttVbvcrqShBMgwCEK8uFF8kjilhjB8pMRxpBEhOf4PAjtyhySyhFwxq2ATkr
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 49351376095274724723197113305359075762
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hopkinton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'EMC Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sponsor.emc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23111558673122332589177536377741927002867218025605702929434211815152599034936659604341236253191220006497718448327372754561946640861993941093200669793740392748450426032247316161462153966535369248753954538718453088824087738210516932410089723084064655865142224216435502133995110380080610676726926631327597823400258061558765834873237230869866476961051763706623970447856540330696932527008773687579900565714157068993431927862542844960758868753984289244159070663199087997119040818197554302605891762675528672989641294963810318989145398780818983558837212847642813901988343427499468102861433691796073124194839510596245811440543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (372 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crkgwisepsnpr1.corp.emc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crkgwisepsnpr2.corp.emc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drmgwisepsnpr1.corp.emc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drmgwmntprd01.corp.emc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drmgwpanprd01.corp.emc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guest.emc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hopgwisepsnpr1.corp.emc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hopgwmntprd01.corp.emc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hopgwpanprd01.corp.emc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ban06gwisem1.corp.emc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ban06gwisem2.corp.emc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ban06gwisep1.corp.emc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syd02gwisep1.corp.emc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sponsor.emc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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