oscar-gcp.us-central1.gcp.dev.paypalinc.com

- PayPal, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0b:f8:f4:fd:b8:46:ad:25:bf:b6:a7:40:f7:7a:5d:ef was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PayPal, Inc.

Organization: PayPal, Inc.
State / Province: California
Locality: San Jose
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:f8:f4:fd:b8:46:ad:25:bf:b6:a7:40:f7:7a:5d:ef
Serial Number (int): 15914166584249803250524291716605435375
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 04:b3:69:66:4e:99:1a:fb:99:f1:f3:ed:24:7a:30:8b:04:6a:8d:34
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): da:2e:81:4e:6a:cb:01:5a:cb:88:36:88:0a:42:1b:13:b3:a1:ec:50
Fingerprint (sha256): 12:5d:1e:66:6e:38:26:78:a1:ec:d3:ed:46:42:bc:3f:9d:e4:e7:0d:da:e9:02:91:64:f0:0c:5b:2f:7f:70:74

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate oscar-gcp.us-central1.gcp.dev.paypalinc.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oscar-gcp.us-central1.gcp.dev.paypalinc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oscar-gcp.us-central1.gcp.dev.paypalinc.com

Other certificates including the domain name paypalinc.com

(limited to 100 certificates)
merchantmonitoring-dev-midtier.paypalinc.com
quaero-sso.paypalinc.com
payflow.paypalinc.com
lvs7isepsn02.lvs.paypalinc.com
cg01mulemq2988.ccg01.phx.paypalinc.com
ccg13epoapp01.ccg13.slc.paypalinc.com
dockerhub.paypalinc.com
fircomq02.ccg12.paypalinc.com
iris-vip.paypalinc.com
pie-linux-host.paypalinc.com
dataviz-dr-host.paypalinc.com
slcctrlmem02a.slc.paypal.com
apigraphnodeweb.dev.paypalinc.com
cskb.paypalinc.com
sapaz1dbpu01.ccg24-hrzana-fin-dns-poc.ccg24.lvs.paypalinc.com
dev51ggdbuc1b1.dev51-tools-data-db.dev51.cbf.dev.paypalinc.com
aporetoconsole.us-ce1.gcp.paypalinc.com
paydiantforwarder.gcp.paypalinc.com
jiraprod.g.dev.paypalinc.com
dataalm.paypalinc.com
githubgcp.qa.paypal.com
c3cloudinfo.paypalinc.com
observability-msmaster.qa.paypal.com
phx1webmill1.phx.paypalinc.com
pcuc1cautgen01.qa.paypal.com
uptycs.paypalinc.com
paypalreports-host.paypalinc.com
internal-beta.paypalinc.com
splunkuba.paypalinc.com
secforce-1.us-central1.gcp.dev.paypalinc.com
onesourcetaxengineserv.paypalinc.com
IHNGNIX-host.qa.paypalinc.com
keymakerca.paypalinc.com
astrodalm.ccg24.paypalinc.com
rp.us-ce1-tools-mgt-rls-workflow.dev51.cbf.dev.paypalinc.com
c3placement.paypalinc.com
sfx-observability.us-central1.gcp.dev.paypalinc.com
uc4awi-dw-prd.vip.paypalinc.com
uptycsuidev.dev.paypalinc.com
azm.paypalinc.com
instance-3.pp-devcos-wzgoda.us-central1.gcp.dev.paypalinc.com
fptigov.paypalinc.com
phxppuaznginxqa01.uaz01.phx.paypalinc.com
k8s-api-proxy.gke.gcp.dev.paypalinc.com
events.paypalinc.com
udc-ws-vip.ccg21.lvs.paypalinc.com
sparkle-dashboard.dev.paypalinc.com
oim-iam-stg-host.paypalinc.com
ccg01aidiapp3.ccg01.phx.paypalinc.com
continuitysb.paypalinc.com
IHNGNIX-host.paypalinc.com
sigmagateway.paypalinc.com
engineering.paypalinc.com
identityhubservices.paypalinc.com
spa.playbook-vip.us-central1.gcp.dev.paypalinc.com
uc4awi-dw-prd.vip.paypalinc.com
cmc-vip.ccg13.cldn02.sds.paypalinc.com
node-pazdmz-freudnodeweb-vip.ccg21.lvs.paypalinc.com
vulnscanner.paypalinc.com
jpmc-client.paypalinc.com
identityhubservicesstg.paypalinc.com
ssopaz.paypalinc.com
dalmserv-nextgen-mgt-qa.qa.paypal.com
secretserver-dev.ccg01.phx.paypalinc.com
identityhubservicesuat.paypalinc.com
dart-host.paypalinc.com
dalmserv-nextgen-qa.qa.paypal.com
milvus.ccg15-hrz-gke-generic.ccg15.slc.paypalinc.com
controlm-em-msgeo.qa.paypal.com
githubqa02.qa.paypal.com
dataviz-qa.paypalinc.com
watch-qa.devqa.paypalinc.com
sapqr1asu01.ccg52.cbf.paypalinc.com
metmo.paypalinc.com
autobox-host.paypalinc.com
flowtraq.paypal.com
udc-ws-host-hrz.paypalinc.com
flbotdocker.us-central1.gcp.dev.paypalinc.com
dft.dbitool.paypalinc.com
scmrx.g.dev.paypalinc.com
accesscentraluat-vip.paypalcorp.com
mlnm-druid.paypalinc.com
dashboard.genesis.dev.paypalinc.com
ldap-vip.paypalinc.com
oim-iam-prod-host.paypalinc.com
iris-host.paypalinc.com
edsconsumer.paypalinc.com
tagovernanceserv.us-central1.gcp.dev.paypalinc.com
ivrselfserv.paypalinc.com
swfamh-vip.ccg13.slc.paypalinc.com
IHNGNIX-host.paypalinc.com
snap.paypalinc.com
oscar-gcp.us-central1.gcp.dev.paypalinc.com
lvshpna1.lvs.paypalinc.com
dbserv-vip.gcp.dev.paypalinc.com
slc10isepan02.slc.paypalinc.com
dockerhub.paypalinc.com
scorecard-qa.us-central1.gcp.dev.paypalinc.com
condorapi.paypalinc.com
acedashboard.us-central1.gcp.dev.paypalinc.com

Certificate

The complete raw certificate details for oscar-gcp.us-central1.gcp.dev.paypalinc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMQMh6IG7rlSoRrLdE+z
oKRtkfUmmglZU7VxzBdlo2EYN6F/Yg9qP31jXVER5lqJN7DKST6pjavWUdQDR8nu
SXQbFMw4A6Mi2wesH6UCwcci4996rBdhqcAHEXO0ovaNOnnuGa0J5snCP8+OpY1U
H6hOLBfZFZOs5AMO3E0dubq4q5ifkoxjFHwri6+pau9rSIItnWBH6MqKrUkbtgxM
FoURbQG3YGRRf2nXDQWBcJ92brqi88Nuyi6PJoX3qRLGf6aBNILdG/rUdQsDhZym
bw3bXs30EoKGvYI/dkMyZFkO2uGnTF/wQqYs7Bo2LG8iHpNs7TWbNvQf9beI+EAb
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15914166584249803250524291716605435375
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Jose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PayPal, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oscar-gcp.us-central1.gcp.dev.paypalinc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25849289550794484968013795460111545024972599197478011708201057118862158409309693627993163434344265251328998039802342193443065152871493527840820322369565444087589342892425270067872175310516753768121225008429488724087001768016369263940996142763976736856355187292456832075768044464749657736757863330603054774623258425400821433951605641702046002052520961059988345933756061007332479378237837077413820887494923562250642479591991930483891887724306400819823922840777543067060910871270938991751914958833402042840221968656311278882138037173362628507820535786422384497523106369513506551378080633762562213076925674204304964066267
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04b369664e991afb99f1f3ed247a308b046a8d34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oscar-gcp.us-central1.gcp.dev.paypalinc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000cf06308d1748bbb667066bc30d91f8c8591644931a61c4f527b352881a6c4dc8d90b11dba20b1737e9f85ac707e04d88dc04b4644c5edea740c3bf581821149d9662cb4a7b9670dbb3d8af2886bc18c1be4765b332d268d12c53967a06fead9d6188faf16ee8d0d8410b5bdef579e4b87bb4a8af2981ef314509c60cd11235250ddf66f59c5c96d5235ff2ab52765a50ed8306d739ceeafa3ca118beb04dbddf5eda13f7649b0ac1512951ec640bcfbc7d6acb3f4f4c36ace3e40282050cd0092ea24823b8512035261209dcd7c3409a59406cc3fe0a1e8792c461c41721c9160d9198e74c17585eebfd24f128ddd4e646eeeebadb6334a2a2e707830b5bc60