fw1.us-gov.veritone.com

- Veritone, Inc. -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 0a:89:09:97:a3:69:3d:d8:a5:8c:0c:a5:9a:7f:7b:95 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Veritone, Inc.

Company registration number: 5551513
Organization: Veritone, Inc.
State / Province: California
Locality: Costa Mesa
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:89:09:97:a3:69:3d:d8:a5:8c:0c:a5:9a:7f:7b:95
Serial Number (int): 14003819183180688505815421403808103317
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d8:f0:5e:18:de:21:59:db:b6:06:c5:0a:12:14:d1:e4:4c:ec:49:64
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): 79:d3:27:3b:8d:7a:8a:0b:a1:01:f1:96:8d:cc:5c:f9:ff:2f:50:ce
Fingerprint (sha256): 14:b0:8c:96:00:24:4c:86:89:d8:5d:2b:07:78:ba:6f:3b:49:a3:33:74:1f:d4:f9:73:43:23:ca:ec:67:06:e3

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g2.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g2.crl

Check the revocation status for certificate fw1.us-gov.veritone.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fw1.us-gov.veritone.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fw1.us-gov.veritone.com

Other certificates including the domain name veritone.com

(limited to 100 certificates)
ssl471900.cloudflaressl.com
*.us-gov-1.veritone.com
unlock.veritone.com
tracking.duckvideo.co
app.nova.ai
bd40b874.ephemeral.dev.us-1.veritone.com
*.dv.dmh.veritone.com
investors.veritone.com
agency.ibex.co
dmshealth.dealertrack.com
ssl769726.cloudflaressl.com
*.aws-uk-prod.veritone.com
586db9f5.ephemeral.dev.us-1.veritone.com
*.wdcd01.uswest2.veritone.com
*.aws-us-gov-prod-sled2.veritone.com
agency.ibex.co
*.us-gov-1.veritone.com
agency.ibex.co
*.aws-us-gov-prod-sled2.veritone.com
ssl420571.cloudflaressl.com
san-004.ceros.com
veritone.com
*.aws-stage.veritone.com
agency.ibex.co
veritone.com
agency.ibex.co
19901b2b.ephemeral.dev.us-1.veritone.com
app.nova.ai
aiware.com
san-004.ceros.com
san-004.ceros.com
*.wpe1.euwest2.veritone.com
chiuchiu.dev
cheetah.apstra.com
san-004.ceros.com
discover.newswire.com
*.veritone.com
harbor.ops.veritone.com
san-004.ceros.com
*.pd.dmh.veritone.com
veritone.com
*.aws-stage-rt.veritone.com
www.vanord.com
chat.veritone.com
*.stage.us-3.veritone.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-43.gcs-web.com
ninjaflips.com
san-004.ceros.com
ssl2176.cloudflare.com
san-004.ceros.com
*.wizr.com
dmshealth.dealertrack.com
leapfrog-ssl-43.gcs-web.com
*.qa.dmh.veritone.com
s.bbot.menu
ssl2176.cloudflare.com
unlock.veritone.com
unlock.veritone.com
*.wpcv01.useast1.veritone.com
app.nova.ai
rev.veritone.com
*.ops.veritone.com
insidesales.veritone.com
saravanafastfood.com
san-004.ceros.com
email.veritone.com
*.aws-uk-prod.veritone.com
*.aws-stage.veritone.com
*.zsfc01.usgoveast1.veritone.com
*.wpe1.euwest2.veritone.com
leapfrog-ssl-43.gcs-web.com
*.aws-us-gov-prod-sled2.veritone.com
*.wpcc03.cacentral1.veritone.com
unlock.veritone.com
san-004.ceros.com
ssl2176.cloudflare.com
*.dmh.veritone.com
*.aws-prod-hl2.veritone.com
san-004.ceros.com
relone.veritone.com
leapfrog-ssl-43.gcs-web.com
dmshealth.dealertrack.com
jenkins.engage-dev.veritone.com
dmshealth.dealertrack.com
*.uk-1.veritone.com
salesloft.veritone.com
leapfrog-ssl-43.gcs-web.com
email.veritone.com
ssl2176.cloudflare.com
agency.ibex.co
fw1.us-gov.veritone.com
*.ops.veritone.com
app.pedidos.casadasplantas.net.br
dmshealth.dealertrack.com
*.us-3.veritone.com
fw1.us-gov.veritone.com
notary.ops.veritone.com
offers.veritone.com
insidesales.veritone.com

Certificate

The complete raw certificate details for fw1.us-gov.veritone.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14003819183180688505815421403808103317
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5551513'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Costa Mesa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Veritone, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fw1.us-gov.veritone.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 983738993845301383127838504104556315296842418302323189637567633077391139247917418334948503940207423738841169190256142981813604147116688824286034738234480161509120286155522724795126504348247485614377425868112862739889899591008924734310427759143799380739146504400056199640375374341693216664606329420728856256190909785445285692599256879561177299499368172751542051290003436648029583093386754689464843887032714055631649574152882433966265257372085466538096001261908557513810025774516886595539746526801520391743220142540649788042764449397280343294992272248372424131365522830769014118356400375005997150027027637140700489474140040644847271947331547148959754524090452828492185711787208575454494372472056807115738032637633702655838918031230715260548790741752140845693340536205200059567664499094044614977113214445080321632515125747795805138116394474711759598726568068529124276692994699308077568434161779434938416226928298690367562181381023486087984032996661533233213487460489758392941829550359266112312479679413589140338429299465831886024957269792235904289387471221765572385062529842035032012414888499418361742570231385975393939294084183717256203008726567443485853852872395014712948900867339603478337417762841098335049167141580112610057638928299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d8f05e18de2159dbb606c50a1214d1e44cec4964
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fw1.us-gov.veritone.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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