approved.id.landrover.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0e:06:ce:c0:54:8c:ef:93:25:57:38:b9:4e:48:3a:c5 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=approved.id.landrover.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0e:06:ce:c0:54:8c:ef:93:25:57:38:b9:4e:48:3a:c5Serial Number (int): 18644539136492707968975133124864785093
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 7d:24:b2:e3:59:7e:83:f0:e5:04:4c:ac:9d:db:74:57:d7:82:f6:ac
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 49:e3:5f:3c:d2:69:8d:3b:e2:81:e2:6d:02:a8:dd:bc:d0:56:87:18
Fingerprint (sha256): 12:a9:11:1f:f8:e4:a8:5c:90:4b:93:e7:72:c4:cc:91:94:83:23:59:bc:ec:d9:e7:b9:4d:a7:8b:4e:c0:be:8e
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate approved.id.landrover.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for approved.id.landrover.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
approved.id.landrover.com
Other certificates including the domain name landrover.com
(limited to 100 certificates)
bosnia.jaguar.com
www.experience.landrover.com
magazin.peak-muenster.de
qaforms.landrover.com
catalogues.meister.com
kiosk.greater.sydney
www.experience.landrover.com
magazine.landroverusa.com
training.landrover.com
www.hochseescheinkurs.online
approved.lt.landrover.com
dominicanrepublic.landrover.com
qaforms.landrover.com
www.landrover.com
www.landrover.com
online-katalog.baude.com
origin-lrdxforms.landrover.com
approved.ie.landrover.com
lemagazine.landrover.com
e-paper.moinmoin.de
apps.us.landrover.com
epaper.abakus-magdeburg.de
webkiosks.sm-sport.de
apps.us.landrover.com
lrccaw.live.incontrol.landrover.com
journal.flyskywork.com
www.landrover.com
www.landrover.com
bolivia.jaguar.com
admin.experience.landrover.com
moebel-boeck.mediaflip.de
publikationen.kreis-goerlitz.de
www.landrover.com
www.landrover.com
pim.incontrol.landrover.com
approved.cy.landrover.com
chile.jaguar.com
catalog.sogears.com
*.landrover.com
approved.gi.landrover.com
approved.br.landrover.com
prospekte.intersport.de
webkiosk.dein-typ.de
magazin.landrover.com
catalogues.meister.com
shop.landrover.com
incontrol.landrover.com
ecuador.landrover.com
albania.jaguar.com
www.landrover.com
approved.lk.landrover.com
lrccaw.incontrol.landrover.com
experience.landrover.com
online-katalog.baude.com
topixqa2.landrover.jlrext.com
epaper.glasmarte.at
*.landrover.com
smetrics.landrover.com
magazine.landrover.com.cn
approved.ro.landrover.com
kataloge.quester.at
www.jaguar.gt
bibliothek.bregenzerfestspiele.com
kiosk.greater.sydney
apps.us.landrover.com
training.landrover.com
wwwqa.ownerinfo.jaguar.com
approved.id.landrover.com
www.landrover.com
webkiosk.mvz-atrium.de
kiosk.greater.sydney
www.landrover.com
www.landrover.com
ecuador.landrover.com
berliner-kurier.kiosk.plus
app.langguth.wine
pub.vermoegenszentrum.ch
jaguarlandrover.com
epapers.gleitz-online.de
epaper.swecon-baumaschinen.de
gear.landrover.com
webkiosk.baeckereibuettner.de
online-katalog.baude.com
oshqa.jaguar.com
www.jaguar.gt
www.landrover.com
blaetterkatalog.rp-media.de
bibliothek.bregenzerfestspiele.com
search.accessories.landrover.com
apps.us.landrover.com
katalog.ud-shop.de
webkiosk.mvz-atrium.de
www.landrover.com
albania.jaguar.com
kiosk.greater.sydney
approved.jp.landrover.com
www.landrover.com
osh.jaguar.com
pub.vermoegenszentrum.ch
berliner-kurier.kiosk.plus
www.experience.landrover.com
magazin.peak-muenster.de
qaforms.landrover.com
catalogues.meister.com
kiosk.greater.sydney
www.experience.landrover.com
magazine.landroverusa.com
training.landrover.com
www.hochseescheinkurs.online
approved.lt.landrover.com
dominicanrepublic.landrover.com
qaforms.landrover.com
www.landrover.com
www.landrover.com
online-katalog.baude.com
origin-lrdxforms.landrover.com
approved.ie.landrover.com
lemagazine.landrover.com
e-paper.moinmoin.de
apps.us.landrover.com
epaper.abakus-magdeburg.de
webkiosks.sm-sport.de
apps.us.landrover.com
lrccaw.live.incontrol.landrover.com
journal.flyskywork.com
www.landrover.com
www.landrover.com
bolivia.jaguar.com
admin.experience.landrover.com
moebel-boeck.mediaflip.de
publikationen.kreis-goerlitz.de
www.landrover.com
www.landrover.com
pim.incontrol.landrover.com
approved.cy.landrover.com
chile.jaguar.com
catalog.sogears.com
*.landrover.com
approved.gi.landrover.com
approved.br.landrover.com
prospekte.intersport.de
webkiosk.dein-typ.de
magazin.landrover.com
catalogues.meister.com
shop.landrover.com
incontrol.landrover.com
ecuador.landrover.com
albania.jaguar.com
www.landrover.com
approved.lk.landrover.com
lrccaw.incontrol.landrover.com
experience.landrover.com
online-katalog.baude.com
topixqa2.landrover.jlrext.com
epaper.glasmarte.at
*.landrover.com
smetrics.landrover.com
magazine.landrover.com.cn
approved.ro.landrover.com
kataloge.quester.at
www.jaguar.gt
bibliothek.bregenzerfestspiele.com
kiosk.greater.sydney
apps.us.landrover.com
training.landrover.com
wwwqa.ownerinfo.jaguar.com
approved.id.landrover.com
www.landrover.com
webkiosk.mvz-atrium.de
kiosk.greater.sydney
www.landrover.com
www.landrover.com
ecuador.landrover.com
berliner-kurier.kiosk.plus
app.langguth.wine
pub.vermoegenszentrum.ch
jaguarlandrover.com
epapers.gleitz-online.de
epaper.swecon-baumaschinen.de
gear.landrover.com
webkiosk.baeckereibuettner.de
online-katalog.baude.com
oshqa.jaguar.com
www.jaguar.gt
www.landrover.com
blaetterkatalog.rp-media.de
bibliothek.bregenzerfestspiele.com
search.accessories.landrover.com
apps.us.landrover.com
katalog.ud-shop.de
webkiosk.mvz-atrium.de
www.landrover.com
albania.jaguar.com
kiosk.greater.sydney
approved.jp.landrover.com
www.landrover.com
osh.jaguar.com
pub.vermoegenszentrum.ch
berliner-kurier.kiosk.plus
Certificate
The complete raw certificate details for approved.id.landrover.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEcTCCA1mgAwIBAgIQDgbOwFSM75MlVzi5Tkg6xTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMTIxNDAwMDAwMFoXDTI1MDExMTIzNTk1OVowJDEi MCAGA1UEAxMZYXBwcm92ZWQuaWQubGFuZHJvdmVyLmNvbTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAO+rniNhG/4K9EG1js3gi+XKGgmIQDioZLV+fLKb FS8iDaxmJ2/Nv+DUYtlKJ/0H9uh9+jNjaA6o4XjYrsB8EPjojb7W2liz/WrEUjzq F9lLjfwOoaeFM1ntYo5kzEQJgc7jhu8ctOwKwzPwl426NOApqqGLIktYLd8QtxJH z4xtPXmSAnIv9c4ryQiiScq3bfJK8r+8c1SUddgZyol1rcFUBpw5CaB88nJB6BB5 CnbenEsW6J/1p8hHFkx5ofYQr9xidHT/Qlq8uRxCI836ihW8XUyZ52F4yUYenAKj kjKJY7B3q4Xz/2A3A5Iw3UdVw6y/vB2T3GtVSfD0TDsGgdsCAwEAAaOCAYUwggGB MB8GA1UdIwQYMBaAFMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBR9JLLj WX6D8OUETKyd23RX14L2rDAkBgNVHREEHTAbghlhcHByb3ZlZC5pZC5sYW5kcm92 ZXIuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0 cDovL2NybC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY3JsMHUGCCsGAQUF BwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDIuYW1hem9udHJ1 c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAyLmFtYXpvbnRydXN0 LmNvbS9yMm0wMi5jZXIwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAWJh9XinwR296Hwds6MCy2vr62hrnocw0yd4u Q3XTt0+8R5DtDokwZBtW5rHfFMmwZryQJR4by8Y75eir4n6aD1H2PQ6j1i5VzipY z7lwG5prqvLj+Ot5ESaCkAT0vXdAvFWhJeT6oZq3RZIsYX+CAz9w7NlmFewpHLX/ RmXhxdcHEwuyBPIuukr9YcVBH7zjhsdgka1/XdrvhQa3VQsJDurQ6v8PemiK0Eiw 5df8ikjk4WzUyNkQTgw0V6l4dWAzZHBucrJLmaSBRoCAmZgWEX4Q7H5F9lYWPQAI 2nl79yVjpLq83qaCrE7TB6nACCyc+L3W5WDnof83a7AyF3XHAw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76ueI2Eb/gr0QbWOzeCL 5coaCYhAOKhktX58spsVLyINrGYnb82/4NRi2Uon/Qf26H36M2NoDqjheNiuwHwQ +OiNvtbaWLP9asRSPOoX2UuN/A6hp4UzWe1ijmTMRAmBzuOG7xy07ArDM/CXjbo0 4CmqoYsiS1gt3xC3EkfPjG09eZICci/1zivJCKJJyrdt8kryv7xzVJR12BnKiXWt wVQGnDkJoHzyckHoEHkKdt6cSxbon/WnyEcWTHmh9hCv3GJ0dP9CWry5HEIjzfqK FbxdTJnnYXjJRh6cAqOSMoljsHerhfP/YDcDkjDdR1XDrL+8HZPca1VJ8PRMOwaB 2wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18644539136492707968975133124864785093 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-11 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'approved.id.landrover.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30255582742365585454676655650750964885549818717489987340390637093711798214002268962369374511450931509450387923099896728344475881138681465737979825950843963898944305036859303694545641462162561128110037521516492458279554229286669920669876228997821617069320622260436561073319247328724575062350821466380560135875201020655167230758465128501823700436948887919996911480435449213342988314729293611866447296614386536110500719924140827560912878050743310755637265022635044085898616034013605049329746629147622016243400004045254498366770916437772073858405053760491452948995167254139173039607771564398330743102604921861875150782939 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7d24b2e3597e83f0e5044cac9ddb7457d782f6ac . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'approved.id.landrover.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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