surveymonkey.com

Issued by Amazon

About this certificate

This digital certificate with serial number 07:ae:57:40:29:64:1b:e4:32:ee:14:aa:f4:b5:6f:e3 was issued on by Amazon.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=surveymonkey.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:ae:57:40:29:64:1b:e4:32:ee:14:aa:f4:b5:6f:e3
Serial Number (int): 10209825276927299423994635673142652899
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 22:8b:b7:ec:cd:57:49:56:72:cc:e6:5e:78:a5:16:17:8c:09:2b:96
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 12:8b:ff:d8:c8:05:2b:da:5d:e2:12:ad:5d:87:d3:5f:bb:d6:a0:29
Fingerprint (sha256): 0f:0f:4b:64:29:73:24:1e:76:d3:c9:aa:c1:ff:35:b8:44:a3:d5:84:b5:83:9e:45:73:ba:1d:3f:87:06:e5:61

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate surveymonkey.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for surveymonkey.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

surveymonkey.com
*.surveymonkey.net
*.surveymonkey.ca
surveymonkey.fr
surveymonkey.de
eu.surveymonkey.net
surveymonkey.ru
*.research.net
smassets.net
surveymonkey.ca
*.eu.surveymonkey.net
*.surveymonkey.fr
*.smassets.net
*.feedbackeconomy.com
*.surveymonkey.ru
*.surveymonkey.de
surveymonkey.co.uk
*.surveymonkey.nl
*.surveymonkey.com
research.net
eu.surveymonkey.com
feedbackeconomy.com
eu.research.net
surveymonkey.net
*.surveymonkey.eu
surveymonkey.nl
*.eu.surveymonkey.com
*.surveymonkey.co.uk
surveymonkey.eu
*.eu.research.net

Other certificates including the domain name surveymonkey.com

(limited to 100 certificates)
auth-dev-eu.surveymonkey.com
feedback.qualityhosting.de
e.ssl.fastly.net
auth-staging-us.surveymonkey.com
auth-staging-us.surveymonkey.com
go2.surveymonkey.com
*.surveymonkey.com
auth-dev-us.surveymonkey.com
smaudience.surveymonkey.com
styles.surveymonkey.com
survey.gradwell.com
auth-eu.surveymonkey.com
workplaceservices.surveymonkey.com
surveymonkey.map.fastly.net
*.outbound.surveymonkey.com
treehouse.surveymonkey.com
l.ssl.fastly.net
tls.automattic.com
auth-uat-eu.surveymonkey.com
auth-staging-us.surveymonkey.com
l.ssl.fastly.net
auth-eu.surveymonkey.com
scim.surveymonkey.com
sales.surveymonkey.com
*.flashpolling.com
survey.westernwindowsystems.com
auth-uat-us.surveymonkey.com
scim.surveymonkey.com
*.surveymonkey.com
leapfrog-ssl-10.gcs-web.com
supportsurvey.control4.com
auth-dev-us.surveymonkey.com
smartling.surveymonkey.com
surveys.myarg.com
*.domino.corp.surveymonkey.com
*.surveymonkey.com
auth-eu.surveymonkey.com
surveys.fredmangroup.com
auth-eu.surveymonkey.com
sales.surveymonkey.com
surveymonkey.com
auth-uat-eu.surveymonkey.com
surrogate.omegafamilysurrogates.com
*.flashpolling.com
cctld.surveymonkey.com
cctld.surveymonkey.com
auth-us.surveymonkey.com
scim.surveymonkey.com
styles.surveymonkey.com
auth-us.surveymonkey.com
tls.automattic.com
feedback.blackboardinsurance.com
smenterprise.surveymonkey.com
styles.surveymonkey.com
secure.surveymonkey.com
sales.surveymonkey.com
treehouse.surveymonkey.com
tls.automattic.com
www.surveymonkey.com
dns-vetting1.map.fastly.net
itsupport.surveymonkey.com
subdomains.surveymonkey.com
auth-staging-us.surveymonkey.com
auth-eu.surveymonkey.com
*.surveymonkey.com
*.e.ssl.fastly.net
scim.surveymonkey.com
cody-test.getgetfeedbackback.com
smainfo.surveymonkey.com
survey.faq.rakuten.net
auth-staging-eu.surveymonkey.com
auth-us.surveymonkey.com
surveymonkey.com
cx.surveymonkey.com
leapfrog-ssl-10.gcs-web.com
auth-uat-us.surveymonkey.com
scim.surveymonkey.com
sales.surveymonkey.com
go.surveymonkey.com
scim.surveymonkey.com
leapfrog-ssl-10.gcs-web.com
customerfeedback.surveymonkey.com
auth-dev-us.surveymonkey.com
surveymonkey.map.fastly.net
scim.surveymonkey.com
sales.surveymonkey.com
demo.engage.surveymonkey.com
surveymonkey.com
surveymonkey.com
auth-uat-us.surveymonkey.com
styles.surveymonkey.com
styles.surveymonkey.com
surveys.elkay.com
e.ssl.fastly.net
surveymonkey.map.fastly.net
certificates.getfeedback.com
eval.bts.com
view.e.surveymonkey.com
okta.surveymonkey.com
styles.surveymonkey.com

Certificate

The complete raw certificate details for surveymonkey.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEQSeKyzynsSwnZAUhj7
xKGOOHpWfYcYmNe5dhOlTVrcvWXgXnsmlfrih/YAVQwkGCphHh1P+RyQL+grvrf7
lCqxaCnOf0jZ5lIe4vL226mvAlqZZmsyd6HBsGptxpxkl9Zn+JTAcRTeGZM63iLL
czpYWBwc3fA9Stfm5SaKg9geC0GMKkA8gMKt0l77GfSVpVfdCnSzuQE5gy0LGUpc
l2RhivI3WBITwwbcPeECYbQ4l+y1TcvNPjostsa+VD91WN59lnhtxy72h1+rWOOz
BC73AbYVL+IPEAxdSj5l0YrhprYN6TnIlHb/8L0tsM0c3BKdyGxmM4X8jMHGH4RL
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10209825276927299423994635673142652899
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'surveymonkey.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21746556084307510248233490278868556939080885143329229494193159021896994703507054959719688365753849355835590101974085886484058855101463930785957013132821228655099007964270922553972802645212594625401186993044688328788877494451590499766586098620698655864648770087197753773497615056015424045072390529603858689806476334796749150004501349811563898044101675121516410341066883961048857703759797303649681894007260961869622804134084668327438140017543832401371172769904989168119406813801629665589037230452488970791369156691145458274586505980787664058734486876228588978757477026961772014794524513420464507575467188665747276843829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							228bb7eccd57495672cce65e78a516178c092b96
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (566 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveymonkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surveymonkey.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surveymonkey.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveymonkey.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveymonkey.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.surveymonkey.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveymonkey.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.research.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smassets.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveymonkey.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu.surveymonkey.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surveymonkey.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smassets.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.feedbackeconomy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surveymonkey.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surveymonkey.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveymonkey.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surveymonkey.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surveymonkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.surveymonkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedbackeconomy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.research.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveymonkey.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surveymonkey.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveymonkey.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu.surveymonkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surveymonkey.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveymonkey.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu.research.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00be5402a8197ef52bab70baeb2dec5c309eaa76896f7ad57663b0c208bcf5a34f621e09fa5f020b28f27177e7f43ce8ac5d7fe30e3ce05ad8c7443cd59c2aaf5d44d16b092e0d978aee36b1dce0a6619786dd84e1551269470b61fb97c0df30f33238517e61e55be7f13ec0c8fa60dfdf4ea2fc21411cf8933848c5f9a912af5ec9c5b8dac2c39aaa47a41d7c6c93c5bf185019f7f21b5982870c01df53c88a9311743a657f890f6032b8f6c945d25cf7b604b6959bf01fdf97bd870907f768a197e30e421f43acf0c7e57592364a41b2cb8ea1eacf83dabb7a792f6d17e480fbd7502c5130781d6ef24473a9fac62fc6e5b3f9cbb424e3704ad194e9105de737