persistent.app.qa.aws.about.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:df:dc:fe:02:c4:c8:16:98:a0:54:f5:0b:f0:19:c3 was issued on by Amazon.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=persistent.app.qa.aws.about.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:df:dc:fe:02:c4:c8:16:98:a0:54:f5:0b:f0:19:c3
Serial Number (int): 19771556395365035142860601388614818243
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c4:09:4c:cb:c1:56:29:ed:e8:39:e2:32:f4:94:a2:54:c0:4e:32:f7
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): a2:08:b4:c8:30:78:ce:1b:a3:da:9a:67:96:86:bc:14:ea:48:db:46
Fingerprint (sha256): 0b:04:5d:b5:8c:ab:94:02:86:4d:e9:c8:bb:1b:8a:b0:51:e8:35:7a:bc:a0:c7:a1:57:31:ee:fe:7f:34:7d:d8

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate persistent.app.qa.aws.about.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for persistent.app.qa.aws.about.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

persistent.app.qa.aws.about.com
*.external23.persistent.app.qa.aws.about.com
*.external20.persistent.app.qa.aws.about.com
*.qa.aws.about.com
*.external26.persistent.app.qa.aws.about.com
*.internal24.persistent.app.qa.aws.about.com
*.app.qa.aws.about.com
*.internal19.persistent.app.qa.aws.about.com
about.com
*.internal21.persistent.app.qa.aws.about.com
*.internal22.persistent.app.qa.aws.about.com
*.internal25.persistent.app.qa.aws.about.com
*.external21.persistent.app.qa.aws.about.com
*.external27.persistent.app.qa.aws.about.com
*.about.com
*.external24.persistent.app.qa.aws.about.com
*.internal23.persistent.app.qa.aws.about.com
*.internal26.persistent.app.qa.aws.about.com
*.external25.persistent.app.qa.aws.about.com
qa.aws.about.com
*.external22.persistent.app.qa.aws.about.com
*.internal27.persistent.app.qa.aws.about.com
*.external19.persistent.app.qa.aws.about.com
*.internal20.persistent.app.qa.aws.about.com

Other certificates including the domain name about.com

(limited to 100 certificates)
dns-vetting1-mims-pawel.map.fastly.net
ssl003.insnw.net
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
index.investopedia.com
dotdash.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
wildcardsan.askmediagroup.com
ssl003.insnw.net
pe-adhoc-4.app.qa.aws.about.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
a-ue1.dotdash.com
cdncert.askmediagroup.com
continual.app.qa.aws.about.com
cdncert.askmediagroup.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
*.index.about.com
dns-vetting1-mims-pawel.map.fastly.net
ssl003.insnw.net
ssl003.insnw.net
dotdash.map.fastly.net
about.com
dotdash.map.fastly.net
pe-batch.app.qa.aws.about.com
wildcardsan.askmediagroup.com
pe-adhoc-4.app.qa.aws.about.com
b2-alt.shared.global.fastly.net
persistent.app.qa.aws.about.com
wildcardsan.askmediagroup.com
index.investopedia.com
disposable.app.qa.aws.about.com
dns-vetting1-mims-pawel.map.fastly.net
continual.app.qa.aws.about.com
continual.app.qa.aws.about.com
a-ue1.dotdash.com
wildcardsan.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
persistent.app.qa.aws.about.com
a-uw2.dotdash.com
b2-alt.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
cdncert.askmediagroup.com
cdncert.askmediagroup.com
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
*.about.com
cdncert.askmediagroup.com
wildcardsan.askmediagroup.com
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
persistent.app.qa.aws.about.com
ssl003.insnw.net
*.index.about.com
*.about.com
index.investopedia.com
dns-vetting1-mims-pawel.map.fastly.net
*.about.com
b2-alt.shared.global.fastly.net
dotdash.map.fastly.net
cdncert.askmediagroup.com
cdncert.askmediagroup.com
*.about.ask.com
*.about.ask.com
cdncert.askmediagroup.com
index.investopedia.com
dns-vetting1-mims-pawel.map.fastly.net
link.about.com
*.about.com
a-ue1.dotdash.com
*.about.com
ssl003.insnw.net
cdncert.askmediagroup.com
pe-adhoc-3.app.qa.aws.about.com
about.com
b2-alt.shared.global.fastly.net
pe-adhoc-2.app.qa.aws.about.com
outlook.mindspark.com
cdncert.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
ssl003.insnw.net
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
armssl.about.com
wildcardsan.askmediagroup.com
ssl003.insnw.net
b2-alt.shared.global.fastly.net
cdncert.askmediagroup.com
continual.app.qa.aws.about.com
cdncert.askmediagroup.com
cdncert.askmediagroup.com
index.investopedia.com
cdncert.askmediagroup.com
ssl003.insnw.net
a-uw2.dotdash.com
continual.app.prod.aws.about.com
g.ssl.fastly.net
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com

Certificate

The complete raw certificate details for persistent.app.qa.aws.about.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0SKmVcmRlFj0HIndDtE
9XusafXuR3wke+32TsYT2kcsAqAax8rmdrSz6BbgKuBlEnU/9YjPOTDfB34FyUoK
6GsdyNbOSj5r4+47BwdC6KsETuO975ct4wqi04Acu727H2basdfEhiY150UA/XJf
IP6jvLOU14V9cXMiAiduogKKCnIgCo5cnaG1h2SeOGKU3KXBO77qyUFb6UVg9Vr5
UC5HmC48aJtAgQ2VprFfQ2HQU/UzYXP1Jy28FTb8GQwBOIx3D2Hkx/b7+pJhAXQ6
p0FlPe113z60THbcSqhtK555ix7tZ8X5lsZL7mveidFljG44FqY2H0hi5LSW3cg4
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19771556395365035142860601388614818243
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'persistent.app.qa.aws.about.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26165128153149879584690919031832372037107585923901909677187593392014234245693587196061665941918087824067537011582393544110498267498077803571724864083246645591133343026102425031925952133030387477917101252970108111268044391467034228895843709195700596268149077189393487340746725663892053056467314054866657898495425933474146042597813263216184779355037323417875798624362621801090754958653460778056977344849545285776583549107307229697133120527541286954960564704122331137907482973430616695392327031132330778233022458960772091257746714232394082930431381271565726184034820547959119365056011107039775641100734488679324829890691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c4094ccbc15629ede839e232f494a254c04e32f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (951 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external23.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external20.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external26.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal24.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal19.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal21.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal22.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal25.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external21.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external27.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external24.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal23.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal26.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external25.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external22.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal27.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external19.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal20.persistent.app.qa.aws.about.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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