explore-violationpredictor.libertyec.com

- Liberty Mutual Group -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 03:84:22:b7:b8:54:c2:ad:74:16:1d:ef:7d:e1:14:b1 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: USCM
State / Province: New Hampshire
Locality: Portsmouth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:84:22:b7:b8:54:c2:ad:74:16:1d:ef:7d:e1:14:b1
Serial Number (int): 4673771330409320047570069752677209265
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 4c:70:ab:58:ba:50:68:b1:f7:56:2e:81:83:1a:d4:c8:f6:58:3b:f9
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 82:2e:64:59:73:1e:5e:30:1e:de:83:ae:96:ef:2b:2f:d2:8c:87:1c
Fingerprint (sha256): 05:78:85:47:8e:38:3c:85:c3:d1:a9:9a:35:88:fa:72:a1:12:fa:c6:3c:50:0d:18:97:fd:49:7c:b7:9d:20:0c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate explore-violationpredictor.libertyec.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for explore-violationpredictor.libertyec.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

explore-violationpredictor.libertyec.com

Other certificates including the domain name libertyec.com

(limited to 100 certificates)
*.lnpopa.uscm.libertyec.com
claimsview.libertyec.com
piclaimcenter-testers.libertyec.com
2pr-propertypremiumdeterminationservice.libertyec.com
publish-wps.libertyec.com
2pr-pmpieservice-internal.libertyec.com
pmclaims-esb-rental-internal.libertyec.com
pmclaims-esb-fnolservices-internal.libertyec.com
ete-www2.libertymutual.com
*.dev.uscm.libertyec.com
autopolicy-pmwps.libertyec.com
prod-pmcontactcenter-nppi.libertyec.com
2pr-telematicsvaryingenrollmentdiscountservice.libertyec.com
financialaccountservice.libertyec.com
2pr-pifin-salescomp-services.libertyec.com
2pr-telephonymediationservice.libertyec.com
life-fin-wps.libertyec.com
2pr-propertypolicy-pmwps.libertyec.com
pmclaims-esb-rentalreservation-internal.libertyec.com
masterdatamanagement.libertyec.com
2pr-esvc-wps.libertyec.com
2pr-pmclaims-esb-iso-internal.libertyec.com
DEVEFT-dpmsvc.libertyec.com
perf-geicohiss-nppi.libertyec.com
plp-cloud-cpa.libertyec.com
2pr-pmepbam-internal.libertyec.com
test-safeco-acr-payments-api.np.uscm.libertyec.com
pmclaims-esb-internal.libertyec.com
2pr-pmclaims-esb-fnolservices-internal.libertyec.com
ete-www2.libertymutual.com
ditto.libertyec.com
2pr-pmclaimcenter-internal-n2w3.libertyec.com
publishingformsmarketservice.libertyec.com
nginx-admin-launcher.libertyec.com
*.devops.deva.uscm.libertyec.com
pmclaims-esb-claimvideo-internal.libertyec.com
propertytelematicsservice.libertyec.com
2pr-pmclaimcenter-internal-n1w2.libertyec.com
pmclaims-esb-claimservices-internal.libertyec.com
ds-dmgt-nebula-scope-wem-dev.lmig.com
2pr-pmepdoc-internal.libertyec.com
explore-violationpredictor.libertyec.com
ete-www2.libertymutual.com
*.prod.prod-ets-shared.libertyec.com
msb-prefill.libertyec.com
crdt-dataservices.libertyec.com
pmclaims-esb-esubro-internal.libertyec.com
2pr-pmepep.libertyec.com
2pr-inet.libertyec.com
8-internal.us-east-1.non-production.paas.lmig.com
non-prod-wxs.libertyec.com
*.lnpopa.uscm.libertyec.com
crdt-app.libertyec.com
pmclaims-cti-osa-kdc-internal.libertyec.com
ete-www2.libertymutual.com
piclaimsdoc-internal.libertyec.com
rtpo.libertyec.com
pmclaims-esb-claimvideo-internal.libertyec.com
pcf-WhrmGXwiYi.us-east-1.non-production.lmig.com
pmclaims-esb-xact-internal.libertyec.com
perf-marketing.lnpopa.uscm.libertyec.com
appservices.libertyec.com
publishingforms-bpm.libertyec.com
uat-pi-marketservices.libertyec.com
8-internal.us-east-1.non-production.paas.lmig.com
piclaimcenter-testers.libertyec.com
qa-dpmsvc.libertyec.com
autopolicy-pmwps.libertyec.com
pmclaimcenter-internal-n3w2.libertyec.com
2pr-cloudant.libertyec.com
prod-geicohiss-nppi.libertyec.com
*.perf.nonprod.uscm.libertyec.com
8-internal.us-east-1.non-production.paas.lmig.com
*.devops.deva.uscm.libertyec.com
pmclaims-rules-internal.libertyec.com
*.couch.libertyec.com
2pr-fiu.libertyec.com
2pr-pmclaimcenter-internal-n2w4.libertyec.com
2pr-pmpiebackend-internal.libertyec.com
prod-epass-nppi.libertyec.com
whalebot.libertymutual.com
pairingtool.libertyec.com
pmclaims-esb-gatewayservice-internal.libertyec.com
pmclaimcenter-internal-n4w2.libertyec.com
qbe-cpa.libertyec.com
2pr-telematicsvaryingenrollmentdiscountservice.libertyec.com
finmsspgateway.libertyec.com
2pr-pmclaimcenter-internal-n6w2.libertyec.com
2pr-finance-wps.libertyec.com
ete-www2.libertymutual.com
2pr-pmclaims-esb-policyservices-internal.libertyec.com
2pr-ma-appservices.libertyec.com
fiu-nxtgen.libertyec.com
2pr-cloudant-util.libertyec.com
ete-www2.libertymutual.com
2pr-esvc-wps.libertyec.com
*.prod.prod-ets-shared.libertyec.com
2pr-pmpiensa-internal.libertyec.com
cloudant.libertyec.com
pmcentive-erp.libertyec.com

Certificate

The complete raw certificate details for explore-violationpredictor.libertyec.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkk5ItD0stwwVq4ICavL
g1C5E+rystQiYaT5LFSbs5l+2EDwBz5pHPCAmLweB/A+Mj2QXRUDwXXMgE1RqJpN
976/d5AwUSknWMk0hjyBEu7ltjn10qu49JxNbShgSIxeIakg23Ce9LkqsKao1VMQ
nBwhy+z1sKj3uE843MIC8ZuQIqSwxAAvmxjgWBjA3D0uDmRSHjlpdj5CuVu7siPr
SF1G92GIaRG3RBBkHY1VQxBlIxUh2/9qkc9QRn2khQxnCGRwC21VyN9p3koheAHL
YKfoaa278x7ha3vwl5FMyC3NuunNEQoGZ8s3SZA7DhoMSKjJeEuzPMlf5YjUqmoc
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4673771330409320047570069752677209265
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USCM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'explore-violationpredictor.libertyec.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23011479203333068697590495088487888328962414865982999112789112527689178835121612740730385761613601518259162950270551670123823642081162016547845056839154719938005270414696045258844197714428420867541400182355414830061667153552507630583712751453363800452794267104470937138282958613681331199374638877604696836075343868200642728683448877475487164639191812077154265170100299150007496965224635163780247296449178153882538530976336003611999750235672771151369832454048768551616696857689422677695632858353407956346481145594663382280012342716948364005768824076932872854876813945320021040834127771252144085742937650524902526688471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4c70ab58ba5068b1f7562e81831ad4c8f6583bf9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore-violationpredictor.libertyec.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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