dev.gatekeeper.us-abc.symphony.edgedatg.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:56:18:3f:8d:6e:4a:a2:d9:71:0d:0d:55:a5:bd:f0 was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev.gatekeeper.us-abc.symphony.edgedatg.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:56:18:3f:8d:6e:4a:a2:d9:71:0d:0d:55:a5:bd:f0
Serial Number (int): 20385449279583179992482026839444143600
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9c:e1:50:b9:d4:a1:12:65:b3:e8:47:03:34:d3:30:00:83:9f:e4:52
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 8e:97:50:87:61:2b:8b:e0:45:42:0d:8a:be:9c:3d:bf:98:d0:f8:a5
Fingerprint (sha256): 15:21:52:63:b6:e5:71:05:35:84:fb:88:e1:f4:ca:f9:97:83:99:99:e3:a2:b2:e8:f8:08:57:20:ec:d5:15:71

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate dev.gatekeeper.us-abc.symphony.edgedatg.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.gatekeeper.us-abc.symphony.edgedatg.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.gatekeeper.us-abc.symphony.edgedatg.com
*.dev.gatekeeper.us-abc.symphony.edgedatg.com
*.api.config.watchabc.go.com
*.api.contents.watchabc.go.com
dev.gatekeeper.us-abc.symphony.edgedatg.go.com
*.dev.gatekeeper.us-abc.symphony.edgedatg.go.com
*.api.ads.watchabc.go.com
*.api.partners.abc.com
*.api.utils.watchabc.go.com
*.api.entitlement.watchabc.go.com

Other certificates including the domain name edgedatg.com

(limited to 100 certificates)
datg-cdnedge-static-assets.platform.edgedatg.com
test.gatekeeper.us-abc.symphony.edgedatg.com
*.dam.cms.us.platform.edgedatg.com
natgeoinstantaccess.com.platform.edgedatg.com
test.gatekeeper.us-abc.symphony.edgedatg.com
*.gatekeeper.us-abc.symphony.edgedatg.com
staging.gatekeeper.us-abc.symphony.edgedatg.com
olaf-api.east.nonprod.us.platform.edgedatg.com
staging.gatekeeper.us-abc.symphony.edgedatg.com
cdn1.edgedatg.com
test.gatekeeper.us-abc.symphony.edgedatg.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
*.dev.gatekeeper.latam-abc.symphony.edgedatg.com
*.dev.gatekeeper.latam-abc.symphony.edgedatg.com
static.ddb.go.com
dev.gatekeeper.us-abc.symphony.edgedatg.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
dev.gatekeeper.us-abc.symphony.edgedatg.com
qa.gatekeeper.us-abc.symphony.edgedatg.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
*.prod.gatekeeper.latam-abc.symphony.edgedatg.com
dockerhub.prod.ext.us-west-2.us.platform.edgedatg.com
prod.airflow.appdata.us.platform.edgedatg.com
telemetrydashboardmonitor.platform.edgedatg.com
static.ddb.go.com
*.gatekeeper.us-abc.symphony.edgedatg.com
staging.gatekeeper.us-abc.symphony.edgedatg.com
*.dtci-pe-vp-image-resizer.platform.edgedatg.com
static.ddb.go.com
qa.gatekeeper.us-abc.symphony.edgedatg.com
*.gatekeeper.us-abc.symphony.edgedatg.com
olaf-api.west.nonprod.us.platform.edgedatg.com
dev.gatekeeper.us-abc.symphony.edgedatg.com
prod.olaf.us-abc.symphony.edgedatg.com
*.staging.gatekeeper.latam-abc.symphony.edgedatg.com
datg-cdn-static-assets.platform.edgedatg.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
dev.gatekeeper.us-abc.symphony.edgedatg.com
test.gatekeeper.us-abc.symphony.edgedatg.com
*.connector.databus.us.platform.edgedatg.com
test.gatekeeper.latam-abc.symphony.edgedatg.com
prod-datg-cdn-origin.platform.edgedatg.com
*.dtci-pe-vp-image-resizer.platform.edgedatg.com
dockerhub.nonprod.ext.us-east-1.us.platform.edgedatg.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
static.ddb.go.com
*.idphospital.us-abc.symphony.edgedatg.com
abcinstantaccess.com.platform.edgedatg.com
qa.gatekeeper.latam-abc.symphony.edgedatg.com
*.dtci-pe-vp-image-resizer.platform.edgedatg.com
secure.cdn.media.oscar.abc.com
staging.gatekeeper.us-abc.symphony.edgedatg.com
*.test.gatekeeper.latam-abc.symphony.edgedatg.com
*.athenaportal.us.symphony.edgedatg.com
*.connector.databus.us.platform.edgedatg.com
dev.gkcast.us-abc.symphony.edgedatg.com
dev.gatekeeper.us-abc.symphony.edgedatg.com
qa.gatekeeper.latam-abc.symphony.edgedatg.com
idphospital.us-abc.symphony.edgedatg.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
*.test.gatekeeper.latam-abc.symphony.edgedatg.com
dev.gatekeeper.us-abc.symphony.edgedatg.com
prod.gatekeeper.latam-abc.symphony.edgedatg.com
secure.cdn.media.oscar.abc.com
secure.cdn.media.oscar.abc.com
qa.gatekeeper.us-abc.symphony.edgedatg.com
origin.aws.edgedatg.com
dev.gatekeeper.us-abc.symphony.edgedatg.com
staging.gatekeeper.us-abc.symphony.edgedatg.com
dev.gatekeeper.us-abc.symphony.edgedatg.com
telemetrydashboardmonitor.platform.edgedatg.com
dev.gkcast.us-abc.symphony.edgedatg.com
api.watchabc.go.com
qa.gatekeeper.latam-abc.symphony.edgedatg.com
test.gatekeeper.us-abc.symphony.edgedatg.com
*.pres.cms.us.platform.edgedatg.com
origin.aws.edgedatg.com
qa.gatekeeper.us-abc.symphony.edgedatg.com
api.utils.watchabc.go.com
test.gkcast.us-abc.symphony.edgedatg.com
secure.cdn.media.oscar.abc.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
qa.gatekeeper.us-abc.symphony.edgedatg.com
olaf-api.east.prod.us.platform.edgedatg.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
static.ddb.go.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
test.gatekeeper.us-abc.symphony.edgedatg.com
datg-cdn-static-assets.platform.edgedatg.com
qa.gatekeeper.us-abc.symphony.edgedatg.com
staging.gatekeeper.us-abc.symphony.edgedatg.com
static.ddb.go.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
qa.gatekeeper.us-abc.symphony.edgedatg.com
test.gatekeeper.us-abc.symphony.edgedatg.com
qa.gatekeeper.us-abc.symphony.edgedatg.com
*.prod.gatekeeper.latam-abc.symphony.edgedatg.com
telemetrydashboardmonitor.platform.edgedatg.com

Certificate

The complete raw certificate details for dev.gatekeeper.us-abc.symphony.edgedatg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gculqXVmY6uUgC7+gU3
9eFZCtu7Lr9Ey4lIuZ61HIIMWdRfEoCoTNvsU+aXV+WJe+euBDEQhjQmnBloRozb
Fea0jkcVMV3RhLTiFa1o8tQre05yqGufHI+J6Y5BGCqi8vOQLTH0NW25KIMZlKZy
lf9ibztqI9GtxJ4V49R1BPciLaRAViiIvn/txdT/PJZZs4lawRgLdmcab+qA2cAB
9qMY+PjULpsd132rqPj7iMU+6L3lrAdfIRFgYw391EWAUtRYY7edwT5AqY4TDX5d
tmiBuFj2vEooj2rl1goR0czBnew4Uma5+DLoss4LDYpQdrloBpE+F4d7DI485L8H
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20385449279583179992482026839444143600
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.gatekeeper.us-abc.symphony.edgedatg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27018538832129273515855479103456027253878914784283822420206858824698544481423151200648148262949470354862881610855019806708515868903655604922698324877216147328996830880167392294311427920815330062406866689239691614186709651349936624138826823416276268947741909526704798040905981400634236478633089244103521696634139521770810714500681328693127736306825713385395127592619771878016081294738264326491521190304613065186392372393565734525277875150768844024837687111309215836014729357419051287921686202588960265926734389741252895489192777089941471962586357429343018732117837539973223888915659436562321910968948586713395494848403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ce150b9d4a11265b3e8470334d33000839fe452
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (371 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.gatekeeper.us-abc.symphony.edgedatg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.gatekeeper.us-abc.symphony.edgedatg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.config.watchabc.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.contents.watchabc.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.gatekeeper.us-abc.symphony.edgedatg.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.gatekeeper.us-abc.symphony.edgedatg.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.ads.watchabc.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.partners.abc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.utils.watchabc.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.entitlement.watchabc.go.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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