static-origin.zalora.com.my
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 0b:13:4d:c5:15:1b:1c:08:c3:a7:43:c1:5c:c0:90:99 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=static-origin.zalora.com.my
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:13:4d:c5:15:1b:1c:08:c3:a7:43:c1:5c:c0:90:99Serial Number (int): 14721738953965691406892732986796576921
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 11:4e:25:ce:d5:1a:0e:b5:3a:e9:76:de:f4:ea:f5:26:ac:5f:29:4e
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 38:65:ac:68:33:44:68:a0:c6:68:3d:53:66:24:9b:c0:15:ce:b2:bd
Fingerprint (sha256): 0f:63:79:f1:95:cc:15:d8:1c:72:6c:dc:eb:58:d5:82:47:af:14:9f:1c:35:94:23:38:36:19:e7:f9:ca:f3:d8
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate static-origin.zalora.com.my
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for static-origin.zalora.com.my
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
static-origin.zalora.com.my
static-catalog.zalora.com.my
static-catalog.zalora.com.my
Other certificates including the domain name zalora.com.my
(limited to 100 certificates)
support.zalora.com.my
link.zalora.com.my
*.zalora.com
support.zalora.com.my
leveloneacademy.com
zcoop.zalora.com.my
school-payments.childpilot.com
zalora.com.my
thread.zalora.com.my
thread.zalora.com.my
thread.zalora.com.my
www.zalora.com
static-origin.zalora.com.my
zcoop.zalora.com.my
support.zalora.com.my
support.zalora.com.my
*.zalora.com
thread.zalora.com.my
thread.zalora.com.my
*.zalora.com
zalora.com.my
www.zalora.com.my
zalora.com.my
asad.tk
support.zalora.com.my
thread.zalora.com.my
thread.zalora.com.my
support.zalora.com.my
zcoop.zalora.com.my
ratevote.karoldepka.com
api-checkout.zalora.sg
*.zalora.com
thread.zalora.com.my
www.zalora.com
thread.zalora.com.my
ablink.em.zalora.co.id
www.zalora.com
support.zalora.com.my
thread.zalora.com.my
api.zalora.com.my
zcoop.zalora.com.my
thread.zalora.com.my
zcoop.zalora.com.my
zalora.com.my
checkout.zalora.com.my
thread.zalora.com.my
thread.zalora.com.my
thread.zalora.com.my
thread.zalora.com.my
zcoop.zalora.com.my
*.zalora.com
www.zalora.co.id
zcoop.zalora.com.my
ablink.em.zalora.co.id
*.zalora.com
thread.zalora.com.my
*.zalora.com
ablink.em.zalora.co.id
zcoop.zalora.com.my
thread.zalora.com.my
www.zalora.com
www.pissarelliautomoveis.com.br
school-payments.childpilot.com
*.zalora.com.my
*.zalora.com
www.zalora.com
ablink.em.zalora.co.id
thread.zalora.com.my
support.zalora.com.my
thread.zalora.com.my
www.zalora.com
*.zalora.com
*.zalora.com
thread.zalora.com.my
static-origin.zalora.com.my
*.zalora.com
thread.zalora.com.my
checkout.zalora.com.my
thread.zalora.com.my
checkout.zalora.com.my
zcoop.zalora.com.my
zalora.com.my
zcoop.zalora.com.my
zcoop.zalora.com.my
api-checkout.zalora.sg
thread.zalora.com.my
checkout.zalora.com.my
thread.zalora.com.my
thread.zalora.com.my
checkout.zalora.com.my
*.zalora.com.my
www.zalora.com
zcoop.zalora.com.my
support.zalora.com.my
thread.zalora.com.my
support.zalora.com.my
thread.zalora.com.my
zcoop.zalora.com.my
www.zalora.com
ablink.em.zalora.co.id
link.zalora.com.my
*.zalora.com
support.zalora.com.my
leveloneacademy.com
zcoop.zalora.com.my
school-payments.childpilot.com
zalora.com.my
thread.zalora.com.my
thread.zalora.com.my
thread.zalora.com.my
www.zalora.com
static-origin.zalora.com.my
zcoop.zalora.com.my
support.zalora.com.my
support.zalora.com.my
*.zalora.com
thread.zalora.com.my
thread.zalora.com.my
*.zalora.com
zalora.com.my
www.zalora.com.my
zalora.com.my
asad.tk
support.zalora.com.my
thread.zalora.com.my
thread.zalora.com.my
support.zalora.com.my
zcoop.zalora.com.my
ratevote.karoldepka.com
api-checkout.zalora.sg
*.zalora.com
thread.zalora.com.my
www.zalora.com
thread.zalora.com.my
ablink.em.zalora.co.id
www.zalora.com
support.zalora.com.my
thread.zalora.com.my
api.zalora.com.my
zcoop.zalora.com.my
thread.zalora.com.my
zcoop.zalora.com.my
zalora.com.my
checkout.zalora.com.my
thread.zalora.com.my
thread.zalora.com.my
thread.zalora.com.my
thread.zalora.com.my
zcoop.zalora.com.my
*.zalora.com
www.zalora.co.id
zcoop.zalora.com.my
ablink.em.zalora.co.id
*.zalora.com
thread.zalora.com.my
*.zalora.com
ablink.em.zalora.co.id
zcoop.zalora.com.my
thread.zalora.com.my
www.zalora.com
www.pissarelliautomoveis.com.br
school-payments.childpilot.com
*.zalora.com.my
*.zalora.com
www.zalora.com
ablink.em.zalora.co.id
thread.zalora.com.my
support.zalora.com.my
thread.zalora.com.my
www.zalora.com
*.zalora.com
*.zalora.com
thread.zalora.com.my
static-origin.zalora.com.my
*.zalora.com
thread.zalora.com.my
checkout.zalora.com.my
thread.zalora.com.my
checkout.zalora.com.my
zcoop.zalora.com.my
zalora.com.my
zcoop.zalora.com.my
zcoop.zalora.com.my
api-checkout.zalora.sg
thread.zalora.com.my
checkout.zalora.com.my
thread.zalora.com.my
thread.zalora.com.my
checkout.zalora.com.my
*.zalora.com.my
www.zalora.com
zcoop.zalora.com.my
support.zalora.com.my
thread.zalora.com.my
support.zalora.com.my
thread.zalora.com.my
zcoop.zalora.com.my
www.zalora.com
ablink.em.zalora.co.id
Certificate
The complete raw certificate details for static-origin.zalora.com.my in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEkzCCA3ugAwIBAgIQCxNNxRUbHAjDp0PBXMCQmTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDMzMDAwMDAwMFoXDTI0MDQyODIzNTk1OVowJjEk MCIGA1UEAxMbc3RhdGljLW9yaWdpbi56YWxvcmEuY29tLm15MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aTnLP7W1ughlzJ0vypCW4xbxwQODn4AHQ5Q 1Npiew8olluYBnZ//9biFlu/QD8CcnGQp0XTIfsen8gnjkth++/4/K/v7k9wRhqg zERIhGp3DZbgBeH0uCCA16h1sBPaTPBXrd8rQOd8gR0CbOTvl1KN6xY2DSb9vT1/ LDGKrrlqWQ6XjnnLwU1Qa4HnfVbCa8GLDCEfNRSpFUqGFwyGF3L07pqxFI+GxoNU 1o0KjSDMtiEVs1ptcsQZNAohDB+mY90E4X3QXGzKYvjiIJVxU7n5w9Pm02NDu+TP dMjZBFyjzvf0OAZxXEF0r+zY4hXZCAaDuWMjde7P2mKcnHykywIDAQABo4IBpTCC AaEwHwYDVR0jBBgwFoAUgbgOY4qJEhjl+js7UJWf5uWQE4UwHQYDVR0OBBYEFBFO Jc7VGg61Oul23vTq9SasXylOMEQGA1UdEQQ9MDuCG3N0YXRpYy1vcmlnaW4uemFs b3JhLmNvbS5teYIcc3RhdGljLWNhdGFsb2cuemFsb3JhLmNvbS5teTAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0 MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAx LmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYB BQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAxLmFtYXpvbnRydXN0LmNvbTA2BggrBgEF BQcwAoYqaHR0cDovL2NydC5yMm0wMS5hbWF6b250cnVzdC5jb20vcjJtMDEuY2Vy MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQEL BQADggEBAOM+S6yAUy/rZex0gAqamI5YgKx8CeLmTfVJmU8hlMJwhTcFDk4FF+/V ojd8CiHEbcfCOUvbLhSLjMctIO3HWSVZqPdxv82mBhaGzy1kkiVFojIrilHCfkuE HjXCdt4YzeIBQpRP8lja38Pmg/gMF+HOlddCBAFzKfSRTH8jHpCcqeOuPxc8oB5v fqzYh4at6B3Bz/X2QfxFp7swxplM+v93TN4f2I3P4RbFGeiXdnt6iLvP9rkFAvFc Ns1qkVSnR+zviA8ucsYOOwKsluxgdXRFGhSDQaGS0UEOX+35D+E+b32kw4wY3Ibi LJQnpUSs14EPnRvVu1eKL8+OXkbiGI8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aTnLP7W1ughlzJ0vypC W4xbxwQODn4AHQ5Q1Npiew8olluYBnZ//9biFlu/QD8CcnGQp0XTIfsen8gnjkth ++/4/K/v7k9wRhqgzERIhGp3DZbgBeH0uCCA16h1sBPaTPBXrd8rQOd8gR0CbOTv l1KN6xY2DSb9vT1/LDGKrrlqWQ6XjnnLwU1Qa4HnfVbCa8GLDCEfNRSpFUqGFwyG F3L07pqxFI+GxoNU1o0KjSDMtiEVs1ptcsQZNAohDB+mY90E4X3QXGzKYvjiIJVx U7n5w9Pm02NDu+TPdMjZBFyjzvf0OAZxXEF0r+zY4hXZCAaDuWMjde7P2mKcnHyk ywIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14721738953965691406892732986796576921 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-30 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-28 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'static-origin.zalora.com.my' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29494841772061038537281445670763891784260704932599177753485914895900609237452230882137094001294858089283699649894849283844128119063440913115059706868452375794188995126497459317940972132899537317145043655001711692307121369619133206478845242364396918069224888225715242699341147410730819908873519107218180511947631507985369812700981696768537711224907701684948682287916076351876487989471003195960805134444021178465397036491193000855382342977326074345018325905051991697979974198656780580272251530206422074482241564579436317386301909818473204581964671750644630388336175316973139416994242906504155389524348113745273604056267 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 114e25ced51a0eb53ae976def4eaf526ac5f294e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-origin.zalora.com.my' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-catalog.zalora.com.my' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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