af-south-1.signin.aws

Issued by Amazon

About this certificate

This digital certificate with serial number 05:78:67:5b:cd:11:37:7e:ec:c2:cf:85:80:71:eb:b1 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=af-south-1.signin.aws

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:78:67:5b:cd:11:37:7e:ec:c2:cf:85:80:71:eb:b1
Serial Number (int): 7271311963365964423867007853455862705
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 81:cf:09:3a:f9:4d:71:c6:65:5a:35:4d:32:2b:77:5d:ff:43:c9:83
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 3e:9e:8e:f0:2e:df:a2:e0:26:1b:9d:96:95:3b:c1:3b:0f:c6:5e:89
Fingerprint (sha256): 07:9d:c1:26:b4:fc:77:92:b1:7a:72:47:a0:5b:17:c4:ef:b8:d6:85:d4:4f:4f:5e:34:71:ad:40:a7:cf:d3:41

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate af-south-1.signin.aws

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for af-south-1.signin.aws

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

af-south-1.signin.aws
*.af-south-1.signin.aws
signin.aws.amazon.com
*.signin.aws.amazon.com

Other certificates including the domain name signin.aws

(limited to 100 certificates)
ap-east-1.signin.aws
ap-southeast-1.signin.aws
eu-central-1.signin.aws
eu-central-2.jwk.signin.aws
ap-southeast-4.prodish.jwk.signin.aws
ca-central-1.prodish.jwk.signin.aws
us-east-2.prodish.jwk.signin.aws
ap-east-1.alpha.dev.signin.aws
us-east-1.alpha.dev.signin.aws
eu-south-2.jwk.signin.aws
af-south-1.signin.aws
eu-north-1.jwk.signin.aws
eu-north-1.jwk.signin.aws
ap-northeast-2.prodish.signin.aws
ap-northeast-2.prodish.jwk.signin.aws
eu-north-1.jwk.signin.aws
ca-west-1.jwk.signin.aws
ap-south-2.jwk.signin.aws
eu-west-2.jwk.signin.aws
sa-east-1.jwk.signin.aws
eu-west-3.signin.aws
sa-east-1.signin.aws
credentials.beta.signin.aws
ap-northeast-2.signin.aws
eu-central-1.signin.aws
ap-south-2.prodish.jwk.signin.aws
us-west-2.alpha.dev.signin.aws
eu-west-3.signin.aws
ap-southeast-2.signin.aws
eu-west-1.prodish.jwk.signin.aws
eu-west-1.jwk.signin.aws
eu-south-2.prodish.signin.aws
ap-southeast-3.prodish.jwk.signin.aws
af-south-1.signin.aws
ca-central-1.signin.aws
us-east-2.prodish.signin.aws
us-west-1.prodish.jwk.signin.aws
eu-south-1.signin.aws
me-central-1.prodish.signin.aws
ap-southeast-3.prodish.signin.aws
ap-northeast-1.signin.aws
credentials.beta.signin.aws
ap-south-2.prodish.signin.aws
ca-central-1.prodish.signin.aws
us-east-1.signin.aws
eu-central-2.signin.aws
us-east-1.jwk.signin.aws
us-west-1.prodish.signin.aws
ap-southeast-1.jwk.signin.aws
eu-south-1.prodish.jwk.signin.aws
ap-south-2.prodish.signin.aws
eu-west-1.prodish.jwk.signin.aws
ca-central-1.prodish.jwk.signin.aws
ap-east-1.prodish.jwk.signin.aws
ap-southeast-2.jwk.signin.aws
ap-southeast-2.prodish.jwk.signin.aws
eu-central-2.signin.aws
ap-northeast-1.prodish.signin.aws
ap-northeast-1.jwk.signin.aws
ap-east-1.jwk.signin.aws
ca-central-1.signin.aws
ap-southeast-2.prodish.signin.aws
af-south-1.jwk.signin.aws
eu-south-1.prodish.jwk.signin.aws
eu-south-2.prodish.jwk.signin.aws
us-west-2.alpha.dev.signin.aws
eu-central-2.prodish.signin.aws
us-west-1.prodish.signin.aws
ap-northeast-1.prodish.jwk.signin.aws
eu-central-2.signin.aws
ap-south-2.jwk.signin.aws
us-east-1.alpha.dev.signin.aws
ca-central-1.signin.aws
us-west-2.jwk.signin.aws
us-west-2.signin.aws
eu-west-3.signin.aws
ap-southeast-2.prodish.jwk.signin.aws
ap-southeast-3.prodish.jwk.signin.aws
me-south-1.jwk.signin.aws
ap-southeast-3.signin.aws
eu-west-2.jwk.signin.aws
ap-southeast-1.jwk.signin.aws
us-east-1.prodish.jwk.signin.aws
eu-west-3.prodish.jwk.signin.aws
eu-west-1.signin.aws
me-south-1.prodish.jwk.signin.aws
us-west-1.signin.aws
ap-northeast-3.prodish.signin.aws
us-west-2.jwk.signin.aws
us-east-2.signin.aws
eu-north-1.prodish.signin.aws
us-east-2.jwk.signin.aws
ap-northeast-3.prodish.jwk.signin.aws
ap-south-1.signin.aws
us-east-2.prodish.signin.aws
ca-central-1.jwk.signin.aws
eu-west-3.prodish.signin.aws
us-east-1.signin.aws
me-central-1.prodish.signin.aws
eu-south-2.prodish.signin.aws

Certificate

The complete raw certificate details for af-south-1.signin.aws in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIQBXhnW80RN37sws+FgHHrsTANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTA2MTAwMDAwMDBaFw0yMjA1Mjgy
MzU5NTlaMCAxHjAcBgNVBAMTFWFmLXNvdXRoLTEuc2lnbmluLmF3czCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBALLl9kVQEMejTx+CEf3ZT0ZF5pWulZ94
RxDzSYeYY1NlnvTd1WzgZDyKdAfPQ6wyB5yrj9oWE8cCJCdS1lRuTYP4mU3A9RhU
1bmJmvgcyciVxWvoqka6npfNfOXHvETqiZRTtngRyz1jsKUaH3/+Coe/vYFzoRA8
VIF3V/ZqPuw64fLsS1MIaKID+VVg41IIc42ccq2XKgNmmxKxLOha5KVYMaV5WYy3
Vbm0gcYeq9Th/4D5OR1+FxHL6H7ZtkDnUa4J+rsFldcHsrP2yMx9OVZMU1b0rldG
VUxMcffAiNTub1Lg7DfC6LxUuczLZlz7CzToC5O4sN/1YwcteWxCIXcCAwEAAaOC
AcowggHGMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQW
BBSBzwk6+U1xxmVaNU0yK3dd/0PJgzBpBgNVHREEYjBgghVhZi1zb3V0aC0xLnNp
Z25pbi5hd3OCFyouYWYtc291dGgtMS5zaWduaW4uYXdzghVzaWduaW4uYXdzLmFt
YXpvbi5jb22CFyouc2lnbmluLmF3cy5hbWF6b24uY29tMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6g
LIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMBMG
A1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYh
aHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipo
dHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0T
AQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
ILr0f1Uxco7VHmZSqewAYI1RVc9UZ49TY203YPi5oCmA6vjj6u2+0WDnh9vANglK
XasPsxXo/DBw+Wd2woPSBTf6C985cqykkCwOi+pee4gZHlzkEXdxSYK5DwOhrwio
sxdwzKfqLedWi08zwQsiGuZZePUT8hm/GhYfsEw1DPm+qTCSqtXC23+0dDL5ZmgM
7H9DM4/KHN0XgL3912SiCzshYCYiC8xpSZp5sZJQiUKQaxxQDgEb48H0laKmgIPo
6x/AU+ZSLannZz3aKOAxAP/fkHpJFjv5ypvlnkzbzNsJZjQ0RSF69xitxbdYpZvd
1U9KbK+PPLLRHaufeLasFQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuX2RVAQx6NPH4IR/dlP
RkXmla6Vn3hHEPNJh5hjU2We9N3VbOBkPIp0B89DrDIHnKuP2hYTxwIkJ1LWVG5N
g/iZTcD1GFTVuYma+BzJyJXFa+iqRrqel8185ce8ROqJlFO2eBHLPWOwpRoff/4K
h7+9gXOhEDxUgXdX9mo+7Drh8uxLUwhoogP5VWDjUghzjZxyrZcqA2abErEs6Frk
pVgxpXlZjLdVubSBxh6r1OH/gPk5HX4XEcvoftm2QOdRrgn6uwWV1weys/bIzH05
VkxTVvSuV0ZVTExx98CI1O5vUuDsN8LovFS5zMtmXPsLNOgLk7iw3/VjBy15bEIh
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7271311963365964423867007853455862705
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'af-south-1.signin.aws'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22583816770175868813139327600012219782552904763009529537786072517460801870342506410528255770840077257447714147507168042702521967734931086420420751500321208945677953386446367523148491853698305221991654919976717761169006303857178316353532306460184788563049070357667188479672664524238100498128086665431963872460916357529850259404565180606138535493121202355866821576217686477364510468453040234939765155078693324476970407166079309128761467510100540023875789639172959672801063316708742167569818147795467248079513702326954024345533402727954895552095838113145678170164238126689854773483240817550160375891789780170850751881591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							81cf093af94d71c6655a354d322b775dff43c983
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af-south-1.signin.aws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.af-south-1.signin.aws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.aws.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.signin.aws.amazon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0020baf47f5531728ed51e6652a9ec00608d5155cf54678f53636d3760f8b9a02980eaf8e3eaedbed160e787dbc036094a5dab0fb315e8fc3070f96776c283d20537fa0bdf3972aca4902c0e8bea5e7b88191e5ce41177714982b90f03a1af08a8b31770cca7ea2de7568b4f33c10b221ae65978f513f219bf1a161fb04c350cf9bea93092aad5c2db7fb47432f966680cec7f43338fca1cdd1780bdfdd764a20b3b216026220bcc69499a79b192508942906b1c500e011be3c1f495a2a68083e8eb1fc053e6522da9e7673dda28e03100ffdf907a49163bf9ca9be59e4cdbccdb0966343445217af718adc5b758a59bddd54f4a6caf8f3cb2d11dab9f78b6ac15