*.quintoandar.com.br

Issued by Amazon

About this certificate

This digital certificate with serial number 01:c3:3a:cb:f8:80:70:84:52:4b:f6:c1:86:2a:8f:08 was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.quintoandar.com.br

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:c3:3a:cb:f8:80:70:84:52:4b:f6:c1:86:2a:8f:08
Serial Number (int): 2342918423180765739563027627911057160
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 87:ad:35:02:c8:17:86:ca:00:75:93:e9:1a:97:bd:b7:b4:a1:b8:1f
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 5f:49:5f:46:71:85:0e:b3:23:db:99:48:aa:fa:bc:5f:9c:d1:d2:4f
Fingerprint (sha256): 05:12:8d:d8:67:5a:ea:e5:8e:5e:d2:05:fd:aa:ff:a3:a8:85:22:db:9e:62:a6:e3:d2:7c:6d:3f:c4:92:62:7f

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.quintoandar.com.br

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.quintoandar.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.quintoandar.com.br
*.staging.quintoandar.com.br
*.k8s-sandbox-02.quintoandar.com.br
*.mobile.staging.quintoandar.com.br
*.mobile.forno.quintoandar.com.br
*.forno.quintoandar.com.br

Other certificates including the domain name quintoandar.com.br

(limited to 100 certificates)
*.quintoandar.com.br
incapsula.com
ssl4533.cloudflare.com
incapsula.com
api.mobile.forno.quintoandar.com.br
incapsula.com
incapsula.com
incapsula.com
*.quintoandar.com.br
*.forno.quintoandar.com.br
incapsula.com
help.quintoandar.com.br
tls.automattic.com
help.quintoandar.com.br
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.quintoandar.com.br
incapsula.com
carreiras.quintoandar.com.br
incapsula.com
tls.automattic.com
incapsula.com
api.mobile.quintoandar.com.br
*.static.quintoandar.com.br
drone.staging.quintoandar.com.br
staging.quintoandar.com.br
*.forno.quintoandar.com.br
help.quintoandar.com.br
incapsula.com
taporty.it
incapsula.com
incapsula.com
noticias.quintoandar.com.br
incapsula.com
k8s-sandbox-03.quintoandar.com.br
*.quintoandar.com.br
incapsula.com
incapsula.com
*.data.quintoandar.com.br
mkt.quintoandar.com.br
contato.quintoandar.com.br
incapsula.com
meulugar.quintoandar.com.br
help.quintoandar.com.br
mission-control-api.dev.quintoandar.com.br
incapsula.com
*.staging.d2a.quintoandar.com.br
incapsula.com
incapsula.com
mission-control-api.dev.quintoandar.com.br
help.quintoandar.com.br
incapsula.com
verify.biopreva.com
incapsula.com
incapsula.com
help.forno.quintoandar.com.br
incapsula.com
incapsula.com
*.d2a.quintoandar.com.br
incapsula.com
incapsula.com
*.quintoandar.com.br
quintoandar.com.br
incapsula.com
forno.quintoandar.com.br
*.quintoandar.com.br
www.peruzza.si
help.forno.quintoandar.com.br
help.quintoandar.com.br
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
staging.quintoandar.com.br
*.quintoandar.com.br
abrir.bondit.app
incapsula.com
www.putratresna.com
incapsula.com
contato.quintoandar.com.br
app.onyxcard.io
tls.automattic.com
incapsula.com
mkt.quintoandar.com.br
incapsula.com
help.forno.quintoandar.com.br
*.quintoandar.com.br
api.mobile.quintoandar.com.br
incapsula.com
kimetsu-tdca.selforder.live
*.quintoandar.com.br
meulugar.quintoandar.com.br
paravoce.quintoandar.com.br
incapsula.com
www.classipedia.org
incapsula.com
incapsula.com

Certificate

The complete raw certificate details for *.quintoandar.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIQAcM6y/iAcIRSS/bBhiqPCDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTExMTQwMDAwMDBaFw0yMDEyMTQx
MjAwMDBaMB8xHTAbBgNVBAMMFCoucXVpbnRvYW5kYXIuY29tLmJyMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRM0cHQ6AqLwWqShVQcFP3eYoDj/PFDO
P8o2Lxk4Vys8czbPsNS2AnOcWVxyvyFTFbY0/IQSJtevMv2rCay5ySfrYbkRIeqS
Iu3q2DO7JRAZFyckgyzittK9rxy8/y6flccfNZhavrZpJe60TRMm1FtY/bJDwXaG
y5m3CY+vJkp0ivxkwr0ZYgOgxwQEvOYXJVD9lh36H97a5N2KxFE6rpnJvECWI32s
7ofv99wfg0B86irR5d+kjaAQouOC2I8k9PAAnm9F+ZyImEnfQfFwjQy5o4c25yA2
bZ6lfOGjSZ7gpZbrBDHweCgrW75pHlf7vYXtIpsh2fu3j7id9S4yxQIDAQABo4IC
NzCCAjMwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYE
FIetNQLIF4bKAHWT6RqXvbe0obgfMIHIBgNVHREEgcAwgb2CFCoucXVpbnRvYW5k
YXIuY29tLmJyghwqLnN0YWdpbmcucXVpbnRvYW5kYXIuY29tLmJygiMqLms4cy1z
YW5kYm94LTAyLnF1aW50b2FuZGFyLmNvbS5icoIjKi5tb2JpbGUuc3RhZ2luZy5x
dWludG9hbmRhci5jb20uYnKCISoubW9iaWxlLmZvcm5vLnF1aW50b2FuZGFyLmNv
bS5icoIaKi5mb3Juby5xdWludG9hbmRhci5jb20uYnIwDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAs
hipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwIAYD
VR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAt
BggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYG
CCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2Ex
Yi5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAX2mOEV9zBjga2w8GKfbPjdoqFJLymRzSQhfget0EBHcNcoRi
/5K3/IZXlLW10ytWEK4vcznC02+mJ6Jl9f8AZyHFRW9QrMYMhe+/EJtOBZA0Wu2W
urSJrMlNLB0tYBtSAuSCP9zKaL/6FTM3DCS/N6Q7lVtU6Ocqp09Kyv+xSaBoiAc/
6dXj6JtFEBCarW51zCrzjtRVW2wasz+oSBwZvZZI5SC5CbY/LtOIdZh/3PiMhMzh
g1VY07N7gq8QJv27s6CKMo4CvHjspJ4mbxs/lhIUuwodnLg1dGFEjVjAMGyr283a
PfOLQaQH20TAkrnulkCaBLIrjI69Y0NRbkUpBw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRM0cHQ6AqLwWqShVQcF
P3eYoDj/PFDOP8o2Lxk4Vys8czbPsNS2AnOcWVxyvyFTFbY0/IQSJtevMv2rCay5
ySfrYbkRIeqSIu3q2DO7JRAZFyckgyzittK9rxy8/y6flccfNZhavrZpJe60TRMm
1FtY/bJDwXaGy5m3CY+vJkp0ivxkwr0ZYgOgxwQEvOYXJVD9lh36H97a5N2KxFE6
rpnJvECWI32s7ofv99wfg0B86irR5d+kjaAQouOC2I8k9PAAnm9F+ZyImEnfQfFw
jQy5o4c25yA2bZ6lfOGjSZ7gpZbrBDHweCgrW75pHlf7vYXtIpsh2fu3j7id9S4y
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2342918423180765739563027627911057160
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.quintoandar.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23363556678735986786712978326916013144776468730322733835670399292625633243820938244255372547661006291810389587481002770587608793648846413065271455683878818381607761605498836744944148145458732082263502243674908209291553526297544222002587954211132186816921731530746666718655783106240467117627128870030559551183581192706905918877320804897004100963818061988701082187351835209406181920892421198529579714208385098626805747421989150182299691422512863386234887488924925603464510892634013988075344938800106419010006609156631869864032150957373421572587951935963867794391919878563861557284284469002161527628196327290839541625541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87ad3502c81786ca007593e91a97bdb7b4a1b81f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (192 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quintoandar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.quintoandar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k8s-sandbox-02.quintoandar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobile.staging.quintoandar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobile.forno.quintoandar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forno.quintoandar.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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