persistent.app.qa.aws.about.com

Issued by Amazon

About this certificate

This digital certificate with serial number 01:9c:92:56:4b:45:4a:94:26:9c:4c:ee:a6:9f:67:eb was issued on by Amazon.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=persistent.app.qa.aws.about.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:9c:92:56:4b:45:4a:94:26:9c:4c:ee:a6:9f:67:eb
Serial Number (int): 2142194374435602159743821918968440811
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: cf:3b:ab:8b:32:f8:55:1d:af:e4:4a:0c:c9:4a:14:cd:89:3c:32:30
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 66:35:be:81:f1:c3:d0:7f:67:2a:08:85:16:71:3b:b2:20:01:93:f5
Fingerprint (sha256): 07:b8:43:0d:d4:c3:f8:d2:f6:ca:f9:fd:98:8e:65:cc:ba:f2:80:2f:18:b4:7d:4f:89:48:b2:82:de:de:f5:bf

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate persistent.app.qa.aws.about.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for persistent.app.qa.aws.about.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

persistent.app.qa.aws.about.com
*.external22.persistent.app.qa.aws.about.com
*.external25.persistent.app.qa.aws.about.com
*.internal26.persistent.app.qa.aws.about.com
*.app.qa.aws.about.com
*.internal27.persistent.app.qa.aws.about.com
*.internal24.persistent.app.qa.aws.about.com
*.external26.persistent.app.qa.aws.about.com
*.external19.persistent.app.qa.aws.about.com
*.internal23.persistent.app.qa.aws.about.com
*.internal20.persistent.app.qa.aws.about.com
*.qa.aws.about.com
*.internal19.persistent.app.qa.aws.about.com
*.internal22.persistent.app.qa.aws.about.com
*.external21.persistent.app.qa.aws.about.com
qa.aws.about.com
about.com
*.external23.persistent.app.qa.aws.about.com
*.internal21.persistent.app.qa.aws.about.com
*.external27.persistent.app.qa.aws.about.com
*.external20.persistent.app.qa.aws.about.com
*.external24.persistent.app.qa.aws.about.com
*.about.com
*.internal25.persistent.app.qa.aws.about.com

Other certificates including the domain name about.com

(limited to 100 certificates)
dns-vetting1-mims-pawel.map.fastly.net
ssl003.insnw.net
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
index.investopedia.com
dotdash.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
wildcardsan.askmediagroup.com
ssl003.insnw.net
pe-adhoc-4.app.qa.aws.about.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
a-ue1.dotdash.com
cdncert.askmediagroup.com
continual.app.qa.aws.about.com
cdncert.askmediagroup.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
*.index.about.com
dns-vetting1-mims-pawel.map.fastly.net
ssl003.insnw.net
ssl003.insnw.net
dotdash.map.fastly.net
about.com
dotdash.map.fastly.net
pe-batch.app.qa.aws.about.com
wildcardsan.askmediagroup.com
pe-adhoc-4.app.qa.aws.about.com
b2-alt.shared.global.fastly.net
persistent.app.qa.aws.about.com
wildcardsan.askmediagroup.com
index.investopedia.com
disposable.app.qa.aws.about.com
dns-vetting1-mims-pawel.map.fastly.net
continual.app.qa.aws.about.com
continual.app.qa.aws.about.com
a-ue1.dotdash.com
wildcardsan.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
persistent.app.qa.aws.about.com
a-uw2.dotdash.com
b2-alt.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
cdncert.askmediagroup.com
cdncert.askmediagroup.com
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
*.about.com
cdncert.askmediagroup.com
wildcardsan.askmediagroup.com
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
persistent.app.qa.aws.about.com
ssl003.insnw.net
*.index.about.com
*.about.com
index.investopedia.com
dns-vetting1-mims-pawel.map.fastly.net
*.about.com
b2-alt.shared.global.fastly.net
dotdash.map.fastly.net
cdncert.askmediagroup.com
cdncert.askmediagroup.com
*.about.ask.com
*.about.ask.com
cdncert.askmediagroup.com
index.investopedia.com
dns-vetting1-mims-pawel.map.fastly.net
link.about.com
*.about.com
a-ue1.dotdash.com
*.about.com
ssl003.insnw.net
cdncert.askmediagroup.com
pe-adhoc-3.app.qa.aws.about.com
about.com
b2-alt.shared.global.fastly.net
pe-adhoc-2.app.qa.aws.about.com
outlook.mindspark.com
cdncert.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
ssl003.insnw.net
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
armssl.about.com
wildcardsan.askmediagroup.com
ssl003.insnw.net
b2-alt.shared.global.fastly.net
cdncert.askmediagroup.com
continual.app.qa.aws.about.com
cdncert.askmediagroup.com
cdncert.askmediagroup.com
index.investopedia.com
cdncert.askmediagroup.com
ssl003.insnw.net
a-uw2.dotdash.com
continual.app.prod.aws.about.com
g.ssl.fastly.net
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com

Certificate

The complete raw certificate details for persistent.app.qa.aws.about.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb9sO4sBFPVK8pp8jpVd
280zV9/0Dygk7ecjCVawIRURr3FacPRK4atBHrELbFdNrrVwsjSwDGrqCUtzPFGe
Ypq1kddHOdNoRhj6ab1amCguiBbmF05RZsRqp3g269FsJ1vOWoHhyWDbfR+X+qXs
H4qPpZU+PR3VoSvtvduHM324rIZzRAywwTIOBtOl2hes1O3cfmQ5piapaIOgmxpL
IF6p3h5umcR/bO/XIEwJO4AbHEr59L9WEUMgR1A2Ul0fj3XtCzvy408g64FjMTJu
N0sUBx3U+h484DjVTXwgtwR4cgX9Vjjaw1JzW3dFDdTonBn5xdpZ9AK12hq7OQQD
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2142194374435602159743821918968440811
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'persistent.app.qa.aws.about.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22438574071678794209316667002505086223858760470353791140780955589326229632243630032692455703875732812253898424081455029162824085459419086772635401623002243915752951002168573189870757694680090825985171644188683033691625152049919796008255353884609346902839476324353852649381956033288865377036352204970825792536282580598116838040109508576955700322740117257220864798676835288773136848765521150093134857622734170043802102863260600664387435498815173342272411169741594932289294282166948829154772844244338773426398469424346254103635007677213988629873414614934779946225038727480038542314632364437140682875332572890058973250327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf3bab8b32f8551dafe44a0cc94a14cd893c3230
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (951 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external22.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external25.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal26.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal27.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal24.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external26.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external19.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal23.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal20.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal19.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal22.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external21.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external23.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal21.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external27.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external20.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external24.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal25.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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