identity.southerncross.co.nz

- Southern Cross Medical Care Society -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 18:d2:3a:8b:48:bc:2f:0c:28:ef:de:87:46:8c:e0:c7 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Southern Cross Medical Care Society

Company registration number: 1803018
Organization: Southern Cross Medical Care Society
Locality: Auckland
Country: NZ

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 18:d2:3a:8b:48:bc:2f:0c:28:ef:de:87:46:8c:e0:c7
Serial Number (int): 32993041654112316968070128063453388999
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: e9:ef:5a:f4:04:c6:65:15:e1:4b:18:af:25:bf:cc:f6:71:d0:4c:03
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 56:5c:59:cf:9c:40:4d:3c:9c:64:1e:37:0d:5c:39:88:3e:2f:77:18
Fingerprint (sha256): 04:d4:43:a2:90:d6:40:b3:80:46:4a:ff:29:a6:f3:fa:a1:4b:a4:f8:a5:f8:ae:17:66:79:2f:6e:a7:2d:03:f2

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate identity.southerncross.co.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for identity.southerncross.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

identity.southerncross.co.nz
www.identity.southerncross.co.nz

Other certificates including the domain name southerncross.co.nz

(limited to 100 certificates)

hospitals.southerncross.co.nz
npos.southerncross.co.nz
brandkit.southerncross.co.nz
identity.southerncross.co.nz
apply.southerncross.co.nz
u.southerncross.co.nz


brandkit.southerncross.co.nz
assets.hospitals.southerncross.co.nz
sam-facade.southerncross.co.nz
aplogo.southerncross.co.nz
hospitals.southerncross.co.nz
aimee-pp.ts.southerncross.co.nz
southerncrosshospitals.co.nz
hospitals.southerncross.co.nz
easyclaim.southerncross.co.nz
kete.southerncross.co.nz
beingwell.southerncross.co.nz
careers.southerncross.co.nz
providers.southerncross.co.nz

hospitals.southerncross.co.nz
hospitals.southerncross.co.nz
southerncross.co.nz

southerncrosshospitals.co.nz
brandkit.southerncross.co.nz
assets.hospitals.southerncross.co.nz
hospitals.southerncross.co.nz
hospitals.southerncross.co.nz
*.ts.southerncross.co.nz
*.api-sit.southerncross.co.nz
brandkit.southerncross.co.nz
aplogo.southerncross.co.nz
jobs.southerncross.co.nz
aplogo.southerncross.co.nz
*.api-sit.southerncross.co.nz
customer360.pr.southerncross.co.nz
gateway-orb.southerncross.co.nz
assets.hospitals.southerncross.co.nz
identity.southerncross.co.nz
easyclaim16.ts.southerncross.co.nz
identity.southerncross.co.nz
uat.hospitals.southerncross.co.nz
identity-signing.southerncross.co.nz
aplogo.southerncross.co.nz
*.southerncross.co.nz
schs-workflow.southerncross.co.nz
hospitals.southerncross.co.nz
identity-pp.southerncross.co.nz
viewpoint.southerncross.co.nz
hospitals.southerncross.co.nz
hospitals.southerncross.co.nz
*.api-sit.southerncross.co.nz
aimee-pp.ts.southerncross.co.nz
uat.hospitals.southerncross.co.nz
uat.hospitals.southerncross.co.nz

my.southerncross.co.nz
*.surfly.southerncross.co.nz
email.southerncross.co.nz
*.mapi-sit.southerncross.co.nz
hospitals.southerncross.co.nz
*.mapi-test.southerncross.co.nz
uat.hospitals.southerncross.co.nz
southerncrosshospitals.co.nz
hospitals.southerncross.co.nz
*.southerncross.co.nz
*.api-dev.southerncross.co.nz
gateway-orb.southerncross.co.nz
hospitals.southerncross.co.nz
gateway-bri.southerncross.co.nz
aplogo.southerncross.co.nz
aplogo.southerncross.co.nz
mapi.southerncross.co.nz
*.beingwell.southerncross.co.nz
aimee-pp.ts.southerncross.co.nz
uat.hospitals.southerncross.co.nz
hospitals.southerncross.co.nz
www.southerncross.co.nz
www.viewpoint.southerncross.co.nz
brandkit.southerncross.co.nz
viewpoint.southerncross.co.nz
easy-claim-help.southerncross.co.nz
api.switch.southerncross.co.nz
careers.southerncross.co.nz
*.api-test.southerncross.co.nz
assets.hospitals.southerncross.co.nz
*.switch.southerncross.co.nz
www.southerncross.co.nz
assets.hospitals.southerncross.co.nz
api.beingwell.southerncross.co.nz
agm.southerncross.co.nz
kete.southerncross.co.nz
healthcarefinder-pp.ts.southerncross.co.nz
brandkit.southerncross.co.nz
api-pp.southerncross.co.nz
scpc.southerncross.co.nz

Certificate

The complete raw certificate details for identity.southerncross.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tR7fr0m1CZfoavQAF3X
ukSi+pMywHRmoPgo168ss0dhyRszLNaO1rkLRpp108UzRlUNXuBnUq7sMDm58Tr0
1IifX/KEwbhfONdKaSL2DmtorooI/fNLAVBabxKg1MlI+kQ4b3HyFWUoLd/PnZUP
EEmL3uyr6qYpREm5lpN2e7losOCNj8s3Z6IkW88sI8xIpjyBk3OedtEtVimWcu0G
jZYI/xwzY7mSIDthGWmf3ytQEhas8pYs6PknLpYD4OAmOrwQeLGdcbHKhncmFIn4
t/yxbX0X//uCxmHJuu/XOmbEaRn6EzGcLER74SQ1H5RpbsZGdRN0UBD6PTn/zGO3
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 32993041654112316968070128063453388999
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-07 02:55:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-05 02:55:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Auckland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Southern Cross Medical Care Society'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1803018'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'identity.southerncross.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26614823020776007875682449477197196530157001018475874442671557365846454243344607298210784387386071636102095631110306386941182759126573452823257317395336180279954433798599831033714450679889682796743876351498331790565373388356642552883872425954331304823996425353382198547910086973005724517097790392790448999425984966782314656244911029410816094299684493719352347093023158099166075945566361400129522281117420532793309035615192178521443907085593082958364601392237211950279780292511777475080281842847083883816819293080492133177986239455977223083121408099294606451669911788221853643729386887390744051411086467390832306796399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e9ef5af404c66515e14b18af25bfccf671d04c03
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.southerncross.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.identity.southerncross.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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