*.va.opower.it

- Oracle Corporation -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 01:3f:28:72:be:92:19:5f:3c:05:82:0b:e7:7b:dd:c1 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oracle Corporation

Organization: Oracle Corporation
Organization unit: Oracle UGBU AMER-US
State / Province: California
Locality: Redwood City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:3f:28:72:be:92:19:5f:3c:05:82:0b:e7:7b:dd:c1
Serial Number (int): 1657163085246057558099735548635372993
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 49:05:d2:54:3b:61:b0:8b:4e:35:ae:cb:17:11:2c:83:18:2d:03:42
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): b4:d5:77:8c:de:f8:89:eb:8a:73:7a:0e:fa:d8:7f:99:6b:29:48:4a
Fingerprint (sha256): 0b:a5:be:35:09:bb:12:dc:91:01:d4:1e:55:9d:fd:b7:43:45:9e:6a:db:92:a7:97:08:c0:61:70:ce:f1:f6:75

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate *.va.opower.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.va.opower.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.va.opower.it

Other certificates including the domain name opower.it

(limited to 100 certificates)
proxmox-2301.ca.opower.it
stage-redis-cluster.on.opower.it
sunfire-x7-hadoop-1058.va.opower.it
dev-portal-lynx.dss.opower.it
sunfire-x7-hadoop-1026.va.opower.it
sunfire-hadoop-worker-1002.va.opower.it
stage-portal-demo.dss.opower.it
prod-keysecure-1001.va.opower.it
sunfire-x7-hadoop-1055.va.opower.it
proxmox-2301.ca.opower.it
bi-superset.va.opower.it
prod-omatrix-master-1001.va.opower.it
dss-test-qa.dss.opower.it
*.va.opower.it
dev-nomad-consul.va.opower.it
dev-cat-6001.iad.opower.it
dev-ccb-1001.dss.opower.it
demo.dss.opower.com
proxmox-3201.on.opower.com
dss-util-prod.dss.opower.it
dev-nexus-6001.iad.opower.it
vm-hadoop-idc-gateway-3001.on.opower.it
sunfire-x7-hadoop-1006.va.opower.it
stage-cat-nes-imp-1001.dss.opower.it
stage-rabbitmq-da-1001.va.opower.it
sunfire-x7-hadoop-1064.va.opower.it
chef-provisioner.iad.opower.it
omatrix.va.opower.it
proxmox-3201.on.opower.it
prod-nexus-6001.iad.opower.it
vm-hadoop-kafka-3002.on.opower.it
vault-dev.iad.opower.it
test-consul-lb.aws.opower.it
*.on.opower.it
dev-nexus-6001.iad.opower.it
pen-test-nomad-consul.iad.opower.it
prod-cat-demo-1001.dss.opower.it
dev-hadoop-manager.va.opower.it
spacewalk.iad.opower.it
prod-carte-1001.va.opower.it
prod-smtp-us-east.opower.com
prod-vault-lb.aws.opower.it
sunfire-hadoop-worker-3010.on.opower.it
ei-pge-qa.va.opower.it
sunfire-x7-hadoop-1027.va.opower.it
birdman-prod.iad.opower.it
dss-test-qa.dss.opower.it
prod-rabbitmq-da-1001.va.opower.it
hadoop-dac-nav-6001.hadoopnonprod.vcniadlsprd.oraclevcn.com
sunfire-x7-hadoop-1007.va.opower.it
hadoop-dac-master-6001.hadoopnonprod.vcniadlsprd.oraclevcn.com
sunfire-x7-hadoop-1025.va.opower.it
prod-nomad-consul.va.opower.it
prod-chef-1001.dsspayments.opower.it
ops-jenkins.iad.opower.it
sunfire-x7-hadoop-1005.va.opower.it
stage-portal-coa-imp.dss.opower.it
sunfire-x7-hadoop-1056.va.opower.it
prod-hadoop-manager-2001.ca.opower.it
net-firewall-2151.ca.opower.it
prod-nexus-6001.iad.opower.it
dev-portal-puma.dss.opower.it
sunfire-x7-hadoop-1023.va.opower.it
hdp-dac-dr-master-6002.hadoopnonprod.vcniadlsprd.oraclevcn.com
net-firewall-2121.ca.opower.it
github.va.opower.it
qa-redis-cluster-client.va.opower.it
dev-portal-lynx.dss.opower.it
ssoadm.va.opower.it
docker-test-2001.dss.opower.it
sunfire-hadoop-worker-1008.va.opower.it
prod-nexus-6001.iad.opower.it
stage-nomad-consul.on.opower.it
chef-provisioner.va.opower.it
bi-superset-dev.va.opower.it
sunfire-x7-hadoop-1008.va.opower.it
sunfire-hadoop-worker-1009.va.opower.it
prod-odst-rabbitmq-gold.aws.opower.it
dev-portal-cheetah.dss.opower.it
*.va.opower.it
dev-outbound-redis-1001.va.opower.it
test-wiki.iad.opower.it
prod-chef-1001.dsspayments.opower.it
stage-portal-nes-imp.dss.opower.it
dev-carte-1002.va.opower.it
dev-outbound-redis-client.va.opower.it
dev-portal-puma.dss.opower.it
prod-smtp-canada.opower.com
net-firewall-1222.va.opower.it
stage-cat-demo-1001.dss.opower.it
prod-service-discovery-1001.va.opower.it
dev-portal-panther.dss.opower.it
sunfire-x7-hadoop-1039.va.opower.it
dev-nomad-consul.va.opower.it
dev-spacewalk.iad.opower.it
pssc-hadoop-master-1020.va.opower.it
sunfire-hadoop-worker-3012.on.opower.it
vm-hadoop-kafka-3001.on.opower.it
proxmox-3201.on.opower.it
vault.fra.opower.it

Certificate

The complete raw certificate details for *.va.opower.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXlJKhGHKYT2Urjxmpjs
AiR3Y42JlA+2I3iRLpgzk+0C4NfMRAAdTViCEuzTs6sULKw/jQkpMwfAtAOwR0Du
U1ooEQWL1wI5M2Xxe2YVpSf9YNDnE8bXnQjha4nbjqWY5odjJOrO1tEvbHvDgrjk
LL1J2xP2MGP9QyJJ8SklHzJVR+NK9J/xvphBAIiETbCgUo3P4TyoxSYMG4vTW1VS
YTh2hgSJJHcJi7r6eOOxuSEFxKOSWVsmFE/CvVyk89x6YhtzuyfB5Hzg0cDMo/Aa
fi8eA07bNihru3xSFjP+A4DGVwzDWam+tY8l7Jl/h6o/80FkNIMUO7+weSsLPIsD
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1657163085246057558099735548635372993
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redwood City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oracle Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oracle UGBU AMER-US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.va.opower.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21394081795422754482390781136367438796461833481348809519224795224608039726082878003823931541801730189896152452466205795420426278894679595776806761887572025207830572119972563564571230080297135560331528786316196477661546745899792487055932525097225972141639626057198245480501407080571709131302185768027052093655066516991525827751783046741764246742352943229843169210632986902832193518512493751890010843764529539421549919444830610192796988070400135703391727103482826247129390801581495073738985749215491069854323698392242505110923281652091723098447139603019132881102360738221879091873611082438165024331145095949141842527201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4905d2543b61b08b4e35aecb17112c83182d0342
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.va.opower.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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