tkb0nlb-aviary-01.game.us1.lb.anuvu.cloud

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 02:ec:81:08:f1:16:2b:f9:62:16:fc:0e:49:07:22:d5 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tkb0nlb-aviary-01.game.us1.lb.anuvu.cloud

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:ec:81:08:f1:16:2b:f9:62:16:fc:0e:49:07:22:d5
Serial Number (int): 3886455189460913642782036154451960533
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: ab:28:00:07:85:05:5f:24:e8:6d:f2:f1:33:85:10:55:fe:09:77:69
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): d3:ce:70:00:f2:a4:69:26:4b:d0:36:d9:9a:88:e6:c1:d9:da:d3:0f
Fingerprint (sha256): 15:3a:69:b9:5f:41:0c:96:b6:09:ac:56:8f:e3:85:60:28:fe:47:d1:dd:a6:be:02:8d:ca:f5:03:06:da:e6:a8

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate tkb0nlb-aviary-01.game.us1.lb.anuvu.cloud

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tkb0nlb-aviary-01.game.us1.lb.anuvu.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tkb0nlb-aviary-01.game.us1.lb.anuvu.cloud
tkb0aviary.lb.anuvu.cloud

Other certificates including the domain name anuvu.cloud

(limited to 100 certificates)
jckonlb-jnksmstr-01.game.us1.lb.anuvu.cloud
kctkcfr-afrfdocs-01.afgo.us1.lb.anuvu.cloud
y3e1cfr-afgo-01.afgo.us1.lb.anuvu.cloud
uuawnlb-jnksmstr-02.mobi.us1.lb.anuvu.cloud
serversiderendering.lb.anuvu.cloud
yincnlb-jnksmstr-01.dvps.us1.lb.anuvu.cloud
n70ealb-mon-01.dvps.us1.lb.anuvu.cloud
yuhknlb-jnksmstr-01.game.us1.lb.anuvu.cloud
omqscfr-hatchery-01.game.us1.lb.anuvu.cloud
mbd3cfr-geafdocs-01.afgo.us1.lb.anuvu.cloud
pzs1cfr-unittest-01.game.us1.lb.anuvu.cloud
ri5nalb-mon-01.dvps.us1.lb.anuvu.cloud
kh7inlb-jnksmstr-01.game.us1.lb.anuvu.cloud
hdc9cfr-unittest-01.game.us1.lb.anuvu.cloud
odonnlb-jnksmstr-01.dvps.us1.lb.anuvu.cloud
cbcqcfr-afgo-01.afgo.us1.lb.anuvu.cloud
uj9lnlb-jnksmstr-01.acg.us1.lb.anuvu.cloud
mw4vcfr-afgo-01.afgo.us1.lb.anuvu.cloud
gkfxnlb-aviary-01.game.us1.lb.anuvu.cloud
c335cfr-hatchery-01.game.us1.lb.anuvu.cloud
hrtwalb-mon-01.dvps.us1.lb.anuvu.cloud
gfy3nlb-jnksmstr-01.game.us1.lb.anuvu.cloud
yl4salb-mon-01.dvps.us1.lb.anuvu.cloud
bi5bnlb-jnksmstr-01.mobi.us1.lb.anuvu.cloud
liotcfr-geafdocs-01.afgo.us1.lb.anuvu.cloud
jkatcfr-afrfdocs-01.afgo.us1.lb.anuvu.cloud
kaykcfr-cicdartf-01.mobi.us1.lb.anuvu.cloud
pml3nlb-jnksmstr-01.acg.us1.lb.anuvu.cloud
k0zunlb-jnksmstr-01.acg.us1.lb.anuvu.cloud
nn8fcfr-hatchery-01.game.us1.lb.anuvu.cloud
t8b0alb-afrapimk-01.afgo.us1.lb.anuvu.cloud
mqi1nlb-jnksmstr-01.mobi.us1.lb.anuvu.cloud
rwynnlb-flock-01.game.us1.lb.anuvu.cloud
w4pycfr-afrfdocs-01.afgo.us1.lb.anuvu.cloud
qvd5nlb-jnksmstr-01.mobi.us1.lb.anuvu.cloud
w4pyalb-afrapimk-01.afgo.us1.lb.anuvu.cloud
hjs7ec2-tftest-01.tftt.us1.lb.anuvu.cloud
zsgunlb-jnksmstr-01.acg.us1.lb.anuvu.cloud
n7nsnlb-jnksmstr-02.mobi.us1.lb.anuvu.cloud
trhhnlb-jnksmstr-01.dvps.us1.lb.anuvu.cloud
cygexternal-tftest.lb.anuvu.cloud
jckonlb-flock-01.game.us1.lb.anuvu.cloud
hvakcfr-afgo-01.afgo.us1.lb.anuvu.cloud
h1o0nlb-jnksmstr-01.dvps.us1.lb.anuvu.cloud
meuqcfr-cicdartf-01.mobi.us1.lb.anuvu.cloud
agiulutvunittest.hatchery-s3.lb.anuvu.cloud
97ohk0ezec2-tftest-01.tftt.us1.lb.anuvu.cloud
injacfr-afrfdocs-01.afgo.us1.lb.anuvu.cloud
vzo6nlb-jnksmstr-01.mobi.us1.lb.anuvu.cloud
e0pe-tftest-alternate-s3-static.lb.anuvu.cloud
dashboard-afgo.lb.anuvu.cloud
dpj8cfr-hatchery-01.game.us1.lb.anuvu.cloud
y79bcfr-game-01.game.us1.lb.anuvu.cloud
tf4dalb-mon-01.dvps.us1.lb.anuvu.cloud
n70ealb-mon-01.dvps.us1.lb.anuvu.cloud
hfm3cfr-game-01.game.us1.lb.anuvu.cloud
xbeycfr-unittest-01.game.us1.lb.anuvu.cloud
o99ialb-mon-01.dvps.us1.lb.anuvu.cloud
r71wnlb-jnksmstr-01.mobi.us1.lb.anuvu.cloud
dvlrnlb-jnksmstr-02.mobi.us1.lb.anuvu.cloud
ijn6nlb-jnksmstr-01.afgo.us1.lb.anuvu.cloud
fjutcfr-hatchery-01.game.us1.lb.anuvu.cloud
zhwocfr-acms-01.acms.us4.lb.anuvu.cloud
lx3vnlb-jnksmstr-01.mobi.us1.lb.anuvu.cloud
pml3alb-mon-01.dvps.us1.lb.anuvu.cloud
sq57nlb-jnksmstr-01.dvps.us1.lb.anuvu.cloud
ticacfr-cicdartf-01.mobi.us1.lb.anuvu.cloud
cfr-mprtfji-01.cops.us1.sg.anuvu.cloud
jie4cfr-mprtcpa-01.cops.us1.lb.anuvu.cloud
kjbvnlb-aviary-01.game.us1.lb.anuvu.cloud
j0izalb-mon-01.dvps.us1.lb.anuvu.cloud
txwgcfr-gamesite-01.prtl.us1.lb.anuvu.cloud
xui1re5pcicd-artifact.lb.anuvu.cloud
m44mnlb-aviary-01.game.us1.lb.anuvu.cloud
thkxcfr-afgo-01.afgo.us1.lb.anuvu.cloud
joq7alb-afrapimk-01.afgo.us1.lb.anuvu.cloud
j5iexternal-tftest.lb.anuvu.cloud
xnpfalb-mon-01.dvps.us1.lb.anuvu.cloud
gjx5alb-mon-01.dvps.us1.lb.anuvu.cloud
cfr-mprtuam-01.cops.us1.pr.anuvu.cloud
le8zcfr-cicdartf-01.mobi.us1.lb.anuvu.cloud
helfnlb-jnksmstr-02.mobi.us1.lb.anuvu.cloud
l6vlcfr-cicdartf-01.mobi.us1.lb.anuvu.cloud
sngnnlb-flock-01.game.us1.lb.anuvu.cloud
vqkvalb-afrapimk-01.afgo.us1.lb.anuvu.cloud
e5jpcfr-afrfdocs-01.afgo.us1.lb.anuvu.cloud
t3bwcfr-hatchery-01.game.us1.lb.anuvu.cloud
zhe2alb-afrapimk-01.afgo.us1.lb.anuvu.cloud
kkvxnlb-jnksmstr-01.dvps.us1.lb.anuvu.cloud
o8hexternal-tftest.lb.anuvu.cloud
xcldcfr-afgo-01.afgo.us1.lb.anuvu.cloud
ecianlb-jnksmstr-02.game.us1.lb.anuvu.cloud
co84cfr-afgo-01.afgo.us1.lb.anuvu.cloud
pqt2nlb-jnksmstr-01.mobi.us1.lb.anuvu.cloud
co84cfr-afrfdocs-01.afgo.us1.lb.anuvu.cloud
tvxlnlb-flock-01.game.us4.lb.anuvu.cloud
vzoknlb-jnksmstr-01.acg.us1.lb.anuvu.cloud
xnpfalb-mon-01.dvps.us1.lb.anuvu.cloud
ywa6nlb-jnksmstr-01.game.us1.lb.anuvu.cloud
dangalb-mon-01.dvps.us1.lb.anuvu.cloud

Certificate

The complete raw certificate details for tkb0nlb-aviary-01.game.us1.lb.anuvu.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDxFyKpzWKLgJne4tqDI
Tnl4HC6UolURBiyHFTp9I+P/He5d3OKINc7w1LFebhWJ2XWODdQYnwS3P21QWZNR
xrJ2ipLcP7d55YKdtlhQkV4q89k4OYjxo/JgJI8ddWXyNVjqzXVu4z4kMRcjt+8O
fu3lr+4mmW6AQvj38NtD0k0kCZkTXcDmVAcmsDNlSj4NmXIWjKZQz4fVNyztW9KV
1OETDSp3oKjO84oQuG9lP9JcDEn8vjEVdDLTuiT/0X/Lg2/lWLTFNo+J6yCaeeCS
+DOhGcDRDMYBw/kqROio6E25d8kRJ0IDg70wan6aoaGPcxrZO2IHZ2Od0SpfLUL7
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3886455189460913642782036154451960533
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tkb0nlb-aviary-01.game.us1.lb.anuvu.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22752616417317773788742173229832394497419918442061707392352760305938690895781687091381454793298409688288643652864380203706743300635210827343295428038848592334632936271574744827768320602277875258918206632043371812485129788053334882738378721008853142053824515352553851978804110950005120051450928254169757147324359474898423017082145686390426159884029158560968234685585308978788733784956573818687555186495080232591392740005595446543867675851892834628139933342818047947600523378334734029087458453913447875654297384925364313296828208589051872655517611683405140913111833093898858928979621641914653943338229711720508802923407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab28000785055f24e86df2f133851055fe097769
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tkb0nlb-aviary-01.game.us1.lb.anuvu.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tkb0aviary.lb.anuvu.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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