*.apigw.cn-east-3.huaweicloud.com

- Huawei Software Technologies Co., Ltd -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 05:cf:f5:ef:83:2f:de:11:91:63:4c:9c:e1:57:d8:9e was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Huawei Software Technologies Co., Ltd

Organization: Huawei Software Technologies Co., Ltd
Organization unit: Cloudbu SRE Dept
State / Province: Jiangsu
Locality: Nanjing
Country: CN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:cf:f5:ef:83:2f:de:11:91:63:4c:9c:e1:57:d8:9e
Serial Number (int): 7725933595125428741603639258449959070
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 19:c9:44:87:61:e5:5e:bd:dd:d6:72:a3:bf:4f:bb:92:bf:f4:60:f4
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 51:74:f1:36:7a:e9:d0:80:34:b4:08:9f:c3:40:c5:16:b1:4d:3a:32
Fingerprint (sha256): 13:16:9e:16:85:c6:2f:20:68:e7:0e:da:8b:70:c6:1f:cb:5f:cc:88:32:61:8d:4f:ef:0c:a9:64:68:ff:c8:d2

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://ocsp.dcocsp.cn
CRL Distribution Point: http://cdp1.digicert.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.apigw.cn-east-3.huaweicloud.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.apigw.cn-east-3.huaweicloud.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.apigw.cn-east-3.huaweicloud.com

Other certificates including the domain name huaweicloud.com

(limited to 100 certificates)
*.ide.huaweicloud.com
*.cn-east-3.huaweicloud.com
obs.luzhouzwy01.gov.huaweicloud.com
redis-2c0a202e-d8f1-42e6-bc0b-9916ec603b75.dcs.huaweicloud.com
opensource.huaweicloud.com
*.cn-north-4.huaweicloud.com
macroverse.huaweicloud.com
roundtable.macroverse.huaweicloud.com
*.apistore.huaweicloud.com
*.huaweicloud.com
eda.fusionplant.huaweicloud.com
*.opensource.huaweicloud.com
*.apic.cn-south-1.huaweicloud.com
*.devcloud.cn-north-4.huaweicloud.com
cn-north-4-octopus.huaweicloud.com
ca-east-201-console-dev.huaweicloud.com
*.naas.huaweicloud.com
*.oob.vss.huaweicloud.com
*.apigw.ap-southeast-1.huaweicloud.com
*.cn-north-219.jrzq.huaweicloud.com
*.apigw.cn-east-2.huaweicloud.com
*.iotstage.huaweicloud.com
*.apigw.ap-southeast-3.huaweicloud.com
*.developer.huaweicloud.com
*.devcloud.sa-brazil-1.huaweicloud.com
naas.huaweicloud.com
payment.huaweicloud.com
naas-hk-intl.huaweicloud.com
*.apigw.ap-southeast-1.huaweicloud.com
welink.huaweicloud.com
*.service-sh.ivm.huaweicloud.com
*.ap-southeast-2.huaweicloud.com
*.cn-east-201.jrzq.huaweicloud.com
*.cdn-vod.huaweicloud.com
*.myhuaweicloud.com
*.oob.vss.huaweicloud.com
console.hcsoecology.huaweicloud.com
naas.huaweicloud.com
*.apigw.cn-east-3.huaweicloud.com
intl.huaweicloud.com
*.apigw.ap-southeast-1.huaweicloud.com
*.developer.huaweicloud.com
bosch-iot-suite.market.huaweicloud.com
south-device.campustest.huaweicloud.com
console.petalpay.huaweicloud.com
*.huaweicloud.com
*.workspace.cn-east-3.huaweicloud.com
*.saas.huaweicloud.com
craftartssim.cn-south-1.huaweicloud.com
intl.huaweicloud.com
*.huaweicloud.com
b2bgo.huaweicloud.com
*.ide.huaweicloud.com
event.huaweicloud.com
*.cn-south-1.huaweicloud.com
sd-wan.huaweicloud.com
*.devcloud.ap-southeast-3.huaweicloud.com
dme.cn-south-4.huaweicloud.com
*.apigw.cn-north-4.huaweicloud.com
obs.hbwuhan01.gov.huaweicloud.com
lab-desktop.huaweicloud.com
cn-north-280-modelarts-label.huaweicloud.com
*.connect.huaweicloud.com
event.huaweicloud.com
*.cdn-vod.huaweicloud.com
education.huaweicloud.com
*.devcloud.cn-north-4.huaweicloud.com
*.apistore.huaweicloud.com
*.apic.cn-north-1.huaweicloud.com
*.coreops.huaweicloud.com
as-south-205-console-dev.huaweicloud.com
*.huaweicloud.com
*.workspace.sa-brazil-1.huaweicloud.com
*.developer.huaweicloud.com
*.apistore.huaweicloud.com
*.cn-north-4.huaweicloud.com
*.developer.huaweicloud.com
bosch-iot-suite.market.huaweicloud.com
*.apigw.ap-southeast-2.huaweicloud.com
*.cn-east-201.jrzq.huaweicloud.com
*.coreops.huaweicloud.com
*.devcloud.sa-brazil-1.huaweicloud.com
*.apigw.ap-southeast-2.huaweicloud.com
asset.macroverse.huaweicloud.com
*.developer.intl.huaweicloud.com
sd-wan.huaweicloud.com
*.iotstage.huaweicloud.com
sd-wan.huaweicloud.com
*.apigw.cn-east-2.huaweicloud.com
marketing.huaweicloud.com
fusionplant.huaweicloud.com
*.devcloud.cn-east-3.huaweicloud.com
market.fusionplant.huaweicloud.com
hdc.huaweicloud.com
koosailing.saas.huaweicloud.com
*.apigw.cn-north-1.huaweicloud.com
device-naas3.huaweicloud.com
weuins.naas.huawei.com
payment.huaweicloud.com
obs.ucbhcso.huaweicloud.com

Certificate

The complete raw certificate details for *.apigw.cn-east-3.huaweicloud.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fj3QKwIc/8i+uuTpNcS
aqMnzjbkJIzxJVAstBRwy6LYw0Ce2WTpuP1Wt28nmLA/ghZa/vKXQB9poxxyHSvU
Dy/NvEl3MsQ2pn3c3f4eVazzXCNZuqPvXNYPqrF0I5gVMkMOwM2ftuPeUj5fDT0w
6VHTZdt/xAbjPe/TNoMdTtTp3vaq8ymd5ue3UvQmTzAcGGH4bBogfiDq/SibtNg9
GjQ9sW6/gM1YH3MJKHtB9P+TtwHw66cat1L279y1l9e9YMCSGftX5FLT7BDcJFuO
TqOB/STbiZ53wKlPgSETK70EKnuo3H6O/ZKaAAeWDyT2e8K8KLFVUsQRTbaATqdw
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7725933595125428741603639258449959070
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jiangsu'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nanjing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Huawei Software Technologies Co., Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloudbu SRE Dept'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.apigw.cn-east-3.huaweicloud.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26506575364645227625508473280538950441573865410042545452910940825448886951035735745279679898334512690557163756892308908854284434039009822094412919632194817599967445666115362358302368432416581727040896599280450959549502190204967387039212794958176580503162168481975214376764781108133663891722022323493733495476761615105576148848407652583373951203674154956622797413891874932254526072336510808549733982799889969346304435313360222155516263855602237096612571280652182990904564794272970003999007079559365582355239097938631866149745757946615238862386051951051022549764885350190536456533867195208756556288582431642832437997779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							19c9448761e55ebdddd672a3bf4fbb92bff460f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apigw.cn-east-3.huaweicloud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.digicert.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.dcocsp.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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