approved.gi.landrover.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 04:90:3a:b5:8b:df:70:63:2d:87:95:01:eb:ee:df:6c was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=approved.gi.landrover.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:90:3a:b5:8b:df:70:63:2d:87:95:01:eb:ee:df:6cSerial Number (int): 6065793494111643106348839329820761964
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 14:e7:1c:50:de:cf:2d:04:01:b8:8c:4e:f3:a8:8b:38:b7:e7:f1:f3
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 06:87:9e:f6:95:94:23:6f:63:df:82:c1:e9:8c:98:79:11:f4:91:98
Fingerprint (sha256): 0a:5d:b5:10:00:22:65:22:e9:4a:0d:64:19:8f:63:b8:34:10:68:7e:1a:f7:d1:17:d0:69:56:43:87:48:a9:66
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate approved.gi.landrover.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for approved.gi.landrover.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
approved.gi.landrover.com
Other certificates including the domain name landrover.com
(limited to 100 certificates)
bosnia.jaguar.com
www.experience.landrover.com
magazin.peak-muenster.de
qaforms.landrover.com
catalogues.meister.com
kiosk.greater.sydney
www.experience.landrover.com
magazine.landroverusa.com
training.landrover.com
www.hochseescheinkurs.online
approved.lt.landrover.com
dominicanrepublic.landrover.com
qaforms.landrover.com
www.landrover.com
www.landrover.com
online-katalog.baude.com
origin-lrdxforms.landrover.com
approved.ie.landrover.com
lemagazine.landrover.com
e-paper.moinmoin.de
apps.us.landrover.com
epaper.abakus-magdeburg.de
webkiosks.sm-sport.de
apps.us.landrover.com
lrccaw.live.incontrol.landrover.com
journal.flyskywork.com
www.landrover.com
www.landrover.com
bolivia.jaguar.com
admin.experience.landrover.com
moebel-boeck.mediaflip.de
publikationen.kreis-goerlitz.de
www.landrover.com
www.landrover.com
pim.incontrol.landrover.com
approved.cy.landrover.com
chile.jaguar.com
catalog.sogears.com
*.landrover.com
approved.gi.landrover.com
approved.br.landrover.com
prospekte.intersport.de
webkiosk.dein-typ.de
magazin.landrover.com
catalogues.meister.com
shop.landrover.com
incontrol.landrover.com
ecuador.landrover.com
albania.jaguar.com
www.landrover.com
approved.lk.landrover.com
lrccaw.incontrol.landrover.com
experience.landrover.com
online-katalog.baude.com
topixqa2.landrover.jlrext.com
epaper.glasmarte.at
*.landrover.com
smetrics.landrover.com
magazine.landrover.com.cn
approved.ro.landrover.com
kataloge.quester.at
www.jaguar.gt
bibliothek.bregenzerfestspiele.com
kiosk.greater.sydney
apps.us.landrover.com
training.landrover.com
wwwqa.ownerinfo.jaguar.com
approved.id.landrover.com
www.landrover.com
webkiosk.mvz-atrium.de
kiosk.greater.sydney
www.landrover.com
www.landrover.com
ecuador.landrover.com
berliner-kurier.kiosk.plus
app.langguth.wine
pub.vermoegenszentrum.ch
jaguarlandrover.com
epapers.gleitz-online.de
epaper.swecon-baumaschinen.de
gear.landrover.com
webkiosk.baeckereibuettner.de
online-katalog.baude.com
oshqa.jaguar.com
www.jaguar.gt
www.landrover.com
blaetterkatalog.rp-media.de
bibliothek.bregenzerfestspiele.com
search.accessories.landrover.com
apps.us.landrover.com
katalog.ud-shop.de
webkiosk.mvz-atrium.de
www.landrover.com
albania.jaguar.com
kiosk.greater.sydney
approved.jp.landrover.com
www.landrover.com
osh.jaguar.com
pub.vermoegenszentrum.ch
berliner-kurier.kiosk.plus
www.experience.landrover.com
magazin.peak-muenster.de
qaforms.landrover.com
catalogues.meister.com
kiosk.greater.sydney
www.experience.landrover.com
magazine.landroverusa.com
training.landrover.com
www.hochseescheinkurs.online
approved.lt.landrover.com
dominicanrepublic.landrover.com
qaforms.landrover.com
www.landrover.com
www.landrover.com
online-katalog.baude.com
origin-lrdxforms.landrover.com
approved.ie.landrover.com
lemagazine.landrover.com
e-paper.moinmoin.de
apps.us.landrover.com
epaper.abakus-magdeburg.de
webkiosks.sm-sport.de
apps.us.landrover.com
lrccaw.live.incontrol.landrover.com
journal.flyskywork.com
www.landrover.com
www.landrover.com
bolivia.jaguar.com
admin.experience.landrover.com
moebel-boeck.mediaflip.de
publikationen.kreis-goerlitz.de
www.landrover.com
www.landrover.com
pim.incontrol.landrover.com
approved.cy.landrover.com
chile.jaguar.com
catalog.sogears.com
*.landrover.com
approved.gi.landrover.com
approved.br.landrover.com
prospekte.intersport.de
webkiosk.dein-typ.de
magazin.landrover.com
catalogues.meister.com
shop.landrover.com
incontrol.landrover.com
ecuador.landrover.com
albania.jaguar.com
www.landrover.com
approved.lk.landrover.com
lrccaw.incontrol.landrover.com
experience.landrover.com
online-katalog.baude.com
topixqa2.landrover.jlrext.com
epaper.glasmarte.at
*.landrover.com
smetrics.landrover.com
magazine.landrover.com.cn
approved.ro.landrover.com
kataloge.quester.at
www.jaguar.gt
bibliothek.bregenzerfestspiele.com
kiosk.greater.sydney
apps.us.landrover.com
training.landrover.com
wwwqa.ownerinfo.jaguar.com
approved.id.landrover.com
www.landrover.com
webkiosk.mvz-atrium.de
kiosk.greater.sydney
www.landrover.com
www.landrover.com
ecuador.landrover.com
berliner-kurier.kiosk.plus
app.langguth.wine
pub.vermoegenszentrum.ch
jaguarlandrover.com
epapers.gleitz-online.de
epaper.swecon-baumaschinen.de
gear.landrover.com
webkiosk.baeckereibuettner.de
online-katalog.baude.com
oshqa.jaguar.com
www.jaguar.gt
www.landrover.com
blaetterkatalog.rp-media.de
bibliothek.bregenzerfestspiele.com
search.accessories.landrover.com
apps.us.landrover.com
katalog.ud-shop.de
webkiosk.mvz-atrium.de
www.landrover.com
albania.jaguar.com
kiosk.greater.sydney
approved.jp.landrover.com
www.landrover.com
osh.jaguar.com
pub.vermoegenszentrum.ch
berliner-kurier.kiosk.plus
Certificate
The complete raw certificate details for approved.gi.landrover.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEcTCCA1mgAwIBAgIQBJA6tYvfcGMth5UB6+7fbDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTIxNjAwMDAwMFoXDTI1MDExMzIzNTk1OVowJDEi MCAGA1UEAxMZYXBwcm92ZWQuZ2kubGFuZHJvdmVyLmNvbTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAMRVQihSUOjZWIvvQInnMlV01RbbX8JC3XV31B3/ NfElqYTeDvTqQSJZajMxB3+Np7G9hmKO/FjWJ9vmHexdGn6svXdTvhT+yYI8Nh5b RRvCBBgxp4F+o+C3CkULdakvaRTGl0xBqp6+kK5kKprfgl0xYWP7LKllLp/BdiUb 74WF5PjLb+ZHU06ne7PrIQoAuCp9B3alsjSWVuK3o5AgTsFrxBK92IOeMynn3+gc H9kbR1xn2PJ6L+NzVl/49bkILLKdyRknlA/vO0T/Hukx61AuwD7dbTmkIjVjYBa8 x5o5gK5d3hlPo1tVtbSl0vPt1xl7Pyg9WnGt/zXG5q9/QCcCAwEAAaOCAYUwggGB MB8GA1UdIwQYMBaAFFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1UdDgQWBBQU5xxQ 3s8tBAG4jE7zqIs4t+fx8zAkBgNVHREEHTAbghlhcHByb3ZlZC5naS5sYW5kcm92 ZXIuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0 cDovL2NybC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJtMDMuY3JsMHUGCCsGAQUF BwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDMuYW1hem9udHJ1 c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAzLmFtYXpvbnRydXN0 LmNvbS9yMm0wMy5jZXIwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIF ADANBgkqhkiG9w0BAQsFAAOCAQEArOtiL8/b5GG60XlvJwLC03xnDNYgUY7VpItC kg/ls0Q8G8RM482WXmBz5pTkURvaUI4qrDQXH1NTCTboJ+dRONm9TVxiJ8aWBS3V n8XaJiEEWYoOlJiRBRA4BX4Tyyv4cU4uClPYcCmRnVp98czBnT9urVtgo+jmeVUr v2EpwwR1tPIiTrrjuyrVIS1gar/a1n2rJfROioAloFDJ4QdNL0yf4eoKabQvLiVi ywaFYZqZCJZpn7MrBWKgrmTVBGtaDhNnyx/gbhwRT7D4awBAkw+azAZzQbBCyahC 96cmpAvMEl0dANcf2RoELJHYQkevTxwHsqWjYmbfNg3lEpV5hQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFVCKFJQ6NlYi+9Aiecy VXTVFttfwkLddXfUHf818SWphN4O9OpBIllqMzEHf42nsb2GYo78WNYn2+Yd7F0a fqy9d1O+FP7Jgjw2HltFG8IEGDGngX6j4LcKRQt1qS9pFMaXTEGqnr6QrmQqmt+C XTFhY/ssqWUun8F2JRvvhYXk+Mtv5kdTTqd7s+shCgC4Kn0HdqWyNJZW4rejkCBO wWvEEr3Yg54zKeff6Bwf2RtHXGfY8nov43NWX/j1uQgssp3JGSeUD+87RP8e6THr UC7APt1tOaQiNWNgFrzHmjmArl3eGU+jW1W1tKXS8+3XGXs/KD1aca3/Ncbmr39A JwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6065793494111643106348839329820761964 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-13 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'approved.gi.landrover.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24784750271020297615598105846146236205272008891066824825178376479134635684932120820284918804944340490296516737742203786336924570714499226764014157607025277105221178917295759948118770415227690065076759907774194536591807219090938013475669919939053586015056505026773996310760683553756994022635841104547971997295677982757067514802574237059079259487872102215916830277468846045837678524865423072157067321155514107093167948638218697898695679481291509671370169160046376334514457586795677809812252498098799305315698075908194655625805821691071675000319195377832226661622541380219834573837328930009811991483991018528665889620007 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 14e71c50decf2d0401b88c4ef3a88b38b7e7f1f3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'approved.gi.landrover.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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