ci-usw2.oregon.delivery.aimatch.net

Issued by Amazon

About this certificate

This digital certificate with serial number 07:97:62:4c:ae:0c:0a:61:85:73:2d:3a:75:5f:ba:b1 was issued on by Amazon.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ci-usw2.oregon.delivery.aimatch.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:97:62:4c:ae:0c:0a:61:85:73:2d:3a:75:5f:ba:b1
Serial Number (int): 10090626547479626871390459020594625201
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 7b:c2:de:7f:60:75:43:21:6d:36:84:27:7b:7c:e9:b7:92:9f:d5:d6
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 9c:85:ef:9e:0c:4b:c2:c6:75:08:50:23:94:fc:34:8a:6c:59:a5:ee
Fingerprint (sha256): 0e:21:6e:50:77:19:2b:48:a7:0c:10:eb:32:b6:fa:07:9f:d2:de:1a:d9:34:67:87:58:61:82:0e:97:2b:ee:ea

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate ci-usw2.oregon.delivery.aimatch.net

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ci-usw2.oregon.delivery.aimatch.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ci-usw2.oregon.delivery.aimatch.net
delivery-360-cicc2ust.cxtrvl.com
delivery-ci360.clubpremier.com
delivery-ci360.nature.org
delivery-360-cicc3ust.cxtrvl.com
del.mm.dm.at
delivery-360-cicc1ust.cxtrvl.com
delivery-ci360-nonprod.uscellular.com
delivery.mktg.sas.com
delivery-360-cicc4ust.cxtrvl.com
delivery-360-cicolusp.cxtrvl.com
delivery.dna360.scholastic.com
usincm-delivery.mktg.sas.com
delivery-ci360.worldwildlife.org
delivery-test-ci360.nature.org
delivery-ci360.paulfredrick.com
delivery-ci360.uscellular.com

Other certificates including the domain name aimatch.net

(limited to 100 certificates)
*.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.sydney.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-demo.oregon.delivery.aimatch.net
tier1-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier1-euw1.ireland.delivery.aimatch.net
tier1-apse2.sydney.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier1-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tweety.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
*.aimatch.com
itv-tier1.ireland.delivery.aimatch.net
*.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.oregon-tier3.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
combinedloadtst.oregon.delivery.dev.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
itv-tier1.ireland.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tweety.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-tier2.oregon.delivery.aimatch.net
canary.oregon-tier3.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
*.dev.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
tier2-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
*.aimatch.com
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-apne1.tokyo.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier1-usw2.oregon.delivery.aimatch.net
tier1-apse2.sydney.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
canary.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.oregon.delivery.aimatch.net

Certificate

The complete raw certificate details for ci-usw2.oregon.delivery.aimatch.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkn3BEctItn5tchOQ157
iPUH4QGOJ0GFHSu3TT4AXKJqtQ31B7A9sXArjEgjmr3E9UPzOJp8Zkwm7WYiEpGa
K8jussi8Pmtqd/V+rxv+Mu38EQH29uvQLOScMy3mJz1IzE7au7ViqVBb/S4JZRRL
F2f3TO54m4JMcRn3CIUKjuUbsmueVsgDZUPXJRA40hjaakSnqSNBl+wc/fpzGf7j
LK/De9GhFrrARsEeqtESn7WLz5s/QO0jqlz0hop+7K4vrm99t2hVAnQouN4tn6Pv
+1awQTGhlQmQiva39krlryVzjH1w9bsU7ubXXG5rNGmmJvbXHVsB0XNd2nLNA1h2
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10090626547479626871390459020594625201
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ci-usw2.oregon.delivery.aimatch.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26041564279033905614621236458765745205877050485870909687198238435139533950433521119316721909134535696295763901987449935273475751567867341002104623565067365773905512019803265637677735405918787214881445167162456696284477661456509271971093260805528017541712687886452536716294603790204477556403172326728920371696811977577526489033405910547722112944543186287849258038008965952301248505696914308323525096414615608573214780107158141212476150940998849474082820509781127742993672377267630971270735875296890712766538721643012948837696694506370793970318930844001065886704248657882637536275955379487354485807318538450470876772039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7bc2de7f607543216d3684277b7ce9b7929fd5d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (538 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-usw2.oregon.delivery.aimatch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-360-cicc2ust.cxtrvl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.clubpremier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.nature.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-360-cicc3ust.cxtrvl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-360-cicc1ust.cxtrvl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-nonprod.uscellular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.mktg.sas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-360-cicc4ust.cxtrvl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-360-cicolusp.cxtrvl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.dna360.scholastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usincm-delivery.mktg.sas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.worldwildlife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-test-ci360.nature.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.paulfredrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.uscellular.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006008415402bc1f32f1b617da52391f3405a19d972e1c219f09e0dbc49bcb2a449c62cd232c228efddf79d027ba6705b5abb1219eae10cb9694060c2521624477226fad443c878b06aa18e6a0fe406d0a21252d7633ebb50d337f6fdefa39f15001e48846333fbb1f7599bc663304060cce8559a6afb730edc6dd58f7301e9e3297be521b6e444d78c465f3f337c39545ba995d97979a1034d0ec55568e0d3d402039fd55b98be73279a30c0a3607644eb63925e69cbe9563fd35e1e454bba0927332dc75d49004808e1857ec47c51a6a4e9b3c16607bb0d57b28cc5c6970f40ec10478d3f9fa6726f20cdc53dabcaf21cb6dc904d1be900528ea847bbc25b6df