*.dev.atl-paas.net

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 06:4c:a3:af:9a:ec:d1:f8:6f:ff:7c:4d:38:59:21:56 was issued on by Amazon.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.dev.atl-paas.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:4c:a3:af:9a:ec:d1:f8:6f:ff:7c:4d:38:59:21:56
Serial Number (int): 8373302481598966919103291187890037078
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 0b:95:ea:9f:a3:c5:30:2e:83:76:bf:bb:86:89:34:0f:5b:6c:f6:20
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 72:ad:69:ef:ee:4e:19:a2:28:1a:fd:63:78:b1:82:c6:f9:5e:82:1c
Fingerprint (sha256): 09:f9:bf:15:6d:bd:fa:d9:45:4b:ad:84:41:43:bd:cf:9b:ce:c2:c8:b8:2a:6c:95:85:df:b5:d5:d0:97:d9:bc

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.dev.atl-paas.net

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.dev.atl-paas.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.dev.atl-paas.net
*.internal.dev.atlassian.io
*.ap-southeast-2.dev.public.atl-paas.net
*.dev.atlassian.com
*.dev.public.atl-paas.net
*.internal.uswest2.dev.atlassian.io
*.dev.atlassian.io
*.internal.domain.dev.atlassian.io
*.platform.dev.atlassian.io
*.app.dev.atlassian.io
*.internal.uswest2.adev.atlassian.io
*.dev.internal.atlassian.com
*.sp.dev.atl-paas.net
*.internal.app.dev.atlassian.io
*.ap-southeast-2.dev.atl-paas.net
*.ap-southeast-2.sp.dev.atl-paas.net
*.us-west-2.sp.dev.atl-paas.net
*.uswest2.dev.atlassian.io
*.domain.dev.atlassian.io
*.us-west-2.dev.atl-paas.net
*.internal.platform.dev.atlassian.io
*.us-west-2.dev.public.atl-paas.net
*.uswest2.adev.atlassian.io
*.dev.intsys.atlassian.com

Other certificates including the domain name atl-paas.net

(limited to 100 certificates)
*.staging.atlassian.io
*.atlassian.io
*.staging.atl-paas.net
*.staging.atl-paas.net
ingress-int-01.paas-stgwest2.us-west-2.kitt-inf.net
*.prod.atl-paas.net
*.staging.atl-paas.net
*.atl-paas.net
*.frontend.public.atl-paas.net
*.dev.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.staging.atlassian.io
*.staging.atl-paas.net
*.staging.atlassian.io
*.frontend.public.atl-paas.net
*.atl-paas.net
*.staging.atl-paas.net
*.staging.atlassian.io
*.dev.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
ingress-internal-01.paas-pdevapse2.ap-southeast-2.kitt-inf.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.dev.atl-paas.net
ingress-internal-01.paas-devwest2.us-west-2.kitt-inf.net
*.atl-paas.net
ingress-internal-01.paas-stgwest2.us-west-2.kitt-inf.net
*.dev.atl-paas.net
*.staging.atlassian.io
*.staging.atl-paas.net
*.atlassian.io
*.atl-paas.net
*.frontend.public.atl-paas.net
*.dev.atl-paas.net
*.staging.atl-paas.net
*.dev.atl-paas.net
*.platdev.atl-paas.net
*.dev.atl-paas.net
*.platdev.atl-paas.net
*.platdev.atl-paas.net
*.staging.atlassian.io
*.frontend.public.atl-paas.net
*.staging.atl-paas.net
ingress-cust-01.paas-ddev.ap-southeast-2.kitt-inf.net
*.staging.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.staging.atl-paas.net
*.staging.atl-paas.net
*.staging.atl-paas.net
*.platdev.atl-paas.net
*.atlassian.io
*.atl-paas.net
ingress-internal-01.ap-southeast-2.paas-playground3.kitt-inf.net
*.staging.atl-paas.net
ingress-internal-01.us-west-2.paas-stg.kitt-inf.net
*.staging.atlassian.io
*.staging.atlassian.io
*.atl-paas.net
*.atlassian.io
*.platdev.atl-paas.net
*.staging.atlassian.io
*.atl-paas.net
*.staging.atl-paas.net
*.staging.atlassian.io
*.alvintest.atl-paas.net
*.platdev.atl-paas.net
ingress-internal-01.paas-prodwest2.us-west-2.kitt-inf.net
*.staging.atlassian.io
*.dev.atl-paas.net
*.staging.atl-paas.net
*.staging.atl-paas.net
*.atl-paas.net
*.dev.atlassian.io
*.staging.atl-paas.net
*.frontend.public.atl-paas.net
*.atl-paas.net
*.staging.atl-paas.net
*.atl-paas.net
*.dev.atl-paas.net
*.staging.atlassian.io
ingress-internal-01.paas-ddev.ap-southeast-2.kitt-inf.net
*.staging.atl-paas.net
*.atlassian.io
*.atl-paas.net
*.staging.atl-paas.net
*.platdev.atl-paas.net
*.atl-paas.net
*.dev.atlassian.io
*.staging.atl-paas.net
ingress-internal-01.paas-prodeast.us-east-1.kitt-inf.net
*.staging.atlassian.io
*.atlassian.io
*.staging.atl-paas.net

Certificate

The complete raw certificate details for *.dev.atl-paas.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS5fGcM/H+LrCLcdO3Cu
OqgyG8GPQFyAloTOhJXk/U2+PObF/57y7iwbnKSqkSgwUHVcJOJXKGBfyCkza5ZP
rR/r+JR+9NiPgmMf8kYWz3lg3tCFlSQghlBtNhLFwh2CkZPcVsh9I5LjHTtmfp1e
OHXrkoPGz8UIfdC10+Li2jduEqWMFW82jiC18r2EAmLJ6kHy9MpzmVdVng/Ybw9y
Q7D8lpI2OAyOUxGZnWW9JuHzRn5/C0k8ElZ4a6TMxPdlajqt2iwnECtz7mSXYgcz
6+/5Le9/KyonPUuQEkhWPXnKp1r0veJ6XkIroLpXET9tL/kx620B/GqNNXdYOXFk
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8373302481598966919103291187890037078
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.dev.atl-paas.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20347233731955848952812332414521260942716670663541307890323376645840377805630488626642194757715736922102480978473721168297181191388198295571794146408184958663532835516140441925650424637104349113138418314895111510102865848567365488797044246681312848070661879232389489642544697438567781449758039767918669266403988042660520719666264904430947352287909708428482881936241407283306383502646057007476169178668472292011139740164612032075598589862303694661579233057701823246450753013917977380130309127451001927548759885392952458866587159211440514621153784898862486922909398249011477203778846290134749584977801450871198212777129
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b95ea9fa3c5302e8376bfbb8689340f5b6cf620
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (736 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.dev.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ap-southeast-2.dev.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.atlassian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.uswest2.dev.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.domain.dev.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.platform.dev.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.dev.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.uswest2.adev.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.internal.atlassian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sp.dev.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.app.dev.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ap-southeast-2.dev.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ap-southeast-2.sp.dev.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-2.sp.dev.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uswest2.dev.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domain.dev.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-2.dev.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.platform.dev.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-2.dev.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uswest2.adev.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.intsys.atlassian.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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