*.avg.com

- Avast Software s.r.o. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:3a:c4:48:f0:ba:24:73:fc:20:d1:62:ce:fc:a4:4e was issued on by DigiCert Inc.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Avast Software s.r.o.

Organization: Avast Software s.r.o.
Locality: Praha
Country: CZ

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:3a:c4:48:f0:ba:24:73:fc:20:d1:62:ce:fc:a4:4e
Serial Number (int): 10938958315285798444428466089145181262
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 93:15:56:4b:af:9f:8f:4a:36:b8:32:3d:ef:4a:53:3a:17:2f:1e:0c
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): dc:01:a4:1f:1f:c1:06:d9:c5:63:74:5e:7b:38:0d:72:5e:46:44:f5
Fingerprint (sha256): 15:49:a8:4b:dd:67:f1:bf:1e:23:b2:59:b5:ff:b6:69:0a:b8:46:95:44:e0:b6:b0:f4:62:7d:d0:2e:4c:d3:74

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate *.avg.com

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.avg.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.avg.com
avg.com
business-auth.avg.com
business-auth-prod-nyc.avg.com
business-auth-prod-prg.avg.com
business-auth-prod-ams.avg.com
business-auth-prod-sea.avg.com
business-auth-stage.avg.com
business-auth-stage-nyc.avg.com
business-auth-stage-prg.avg.com
business-auth-prod.avg.com
business-auth-nyc.avg.com
business-auth-prg.avg.com
business-auth-ams.avg.com
business-auth-sea.avg.com
business-auth-fra.avg.com
business-auth-prod-fra.avg.com

Other certificates including the domain name avg.com

(limited to 100 certificates)
business-auth.dev-europe-west3.smbrm.avast.com
*.avg.com
estatus.facturame.mx
release-notes.avg.com
bsmtp-relay-prod-dmz-brq001.mgm.avg.com
*.avg.com
study.cz.avg.com
estatus.facturame.mx
ua-cloud-stage.avg.com
buy-qa4.norton.com
webtuneup.avg.com
*.avg.com
dls.norton.com
click.emails.avg.com
*.avg.com
partners-int.norton.com
san.avg.com
cloudcare-billing.avg.com
ua-cloud-test.avg.com
san-ion.avast.com
*.avg.com
estatus.facturame.mx
ks.norton.com
web.backup.norton.com
*.avg.com
*.avg.com
shop.avg.com
subscriptions-test.avast.com
bconsole-test.avg.com
*.ocm.avg.com
partners.avg.com
*.avg.com
san.avg.com
estatus.facturame.mx
xls-int.norton.com
*.cloudcare.avg.com
somni.avg.com
san-ion.avast.com
*.my.sso.avg.com
*.avg.com
renewus.avg.com
*.avg.com
somni.avg.com
*.avg.com
*.avg.com
tps.avg.com
ua-cloud.avg.com
*.cloudcare.avg.com
signal.avg.com
labs.avg.com
*.avg.com
my-web-test.avast.com
estatus.facturame.mx
study.avg.com
*.avg.com
estatus.facturame.mx
stage-signal.avg.com
*.update.avg.com
avg.com
business-auth.prod.smbrm.avast.com
www9.avg.com
*.avg.com
support.avg.com
sip-01.avg.com
estatus.facturame.mx
study.avg.com
ccrmm.avg.com
estatus.facturame.mx
estatus.facturame.mx
my-web-stage.avast.com
san.avg.com
id.avast.com
estatus.facturame.mx
ks-int2.norton.com
*.cloud.avg.com
integrationbugs.avg.com
mts.norton.com
vpnportal.avg.com
zas-api.avg.com
community.cloudcare.avg.com
support.avg.com
*.avg.com
ncs-spoc-int1.norton.com
*.ccrmm.avg.com
*.avg.com
platformdashboard.avg.com
whatsmyip.mw-rmm.barracudamsp.com
*.avg.com
shop.avg.com
us03.ccrmm.avg.com
activation.avast.com
akamai-san46.exacttarget.com
sni.cloudflaressl.com
*.download.avg.com
san.avast.com
*.avg.com
status.cloudcare.avg.com
share.avg.com
estatus.facturame.mx
vpn.avg.com

Certificate

The complete raw certificate details for *.avg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxLxU4EnBSMFW/2YVjGp
oEOv80K8ObSEgRcCTTUzXAhi9yjjhhT83V/AgpYQKiY0tst53fkFuj42RW15fgEZ
ie5Ca1/AgtASvSRE48uf5Cu5+xH3dLWQ7dG6MoqGQWWrxC+spp4JIRxXD2T/zNwE
9Mc7K8dy/EiTXsmKzZJhnX18yngb4l9pGnj95l0q18zQsD8S2s8E7VEQzFc0p3jp
/KUOfZrtwv8woGqGmrvTwP4Oq7RYdd6XiJWkKBztfDiKQJmVUdwFumgFPaMwWSIR
6QN8sM5mCCt5e79L1w30hbRtGBdkXWSyYJXdIkCukEqJF3sbrpGo1ZLaktbigzan
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10938958315285798444428466089145181262
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Praha'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Avast Software s.r.o.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.avg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21596091133058098560927708031184022742954075358103796767726282899733125646517114131376013400521043735428802432595539493210589384496806460150320852223140635152470806340183338351105265632709559298128244541977497814755057747319641490204353794829419344513039595110344678606415163242329421575046200970563840108671263655668386435192489941397980716019071033111719385084588119350607823789824724172934195688037792300127583221675184888816428667956907708055654495290905402199221741470041361218810440461421513962203568565536257939246860759181215369962901580570576485598418242341520205949174155347449560826116319574375317294720901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9315564baf9f8f4a36b8323def4a533a172f1e0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (465 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-auth.avg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-auth-prod-nyc.avg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-auth-prod-prg.avg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-auth-prod-ams.avg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-auth-prod-sea.avg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-auth-stage.avg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-auth-stage-nyc.avg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-auth-stage-prg.avg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-auth-prod.avg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-auth-nyc.avg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-auth-prg.avg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-auth-ams.avg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-auth-sea.avg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-auth-fra.avg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-auth-prod-fra.avg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004b01af09e099e4017616f7cb0c31866381afee9cb67eda5082dc20f1b45e49b93495edac6bb088bb73af3aa8ffbdd9fa27e9d2b9e74a5908f207c1ea7753924532f301ddbe3d29d84f2afe16465717ad13477f1aa38b8ccb7e49dd6f192993d93c8bb3c2e7b9e6f9573a856cd50bd086eb5344ca252d357f50b0e6957806afa2f727a1304711e307e6d1a74fe99b3dda5ec1e27c9d923c7c914a0de147d1b695ed525eb44aa63cd5aa4730f09eaab798289df9a49ab1a0928227951e973269b2404eed59cde607023c2756e3601e52c6af3fc868e29296cd26fdfb44c2c37d8307d199f5a22030beadf996c4c9ccb9da37bc8b0d9931cd39fd4927ad87376b85