sipskype1.deloitte.co.uk

- DELOITTE LLP -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 0e:77:14:c6:2b:d9:4e:48:bd:91:c9:a4:98:23:92:b7 was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

DELOITTE LLP

Organization: DELOITTE LLP
Organization unit: UKITS
Locality: LONDON
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:77:14:c6:2b:d9:4e:48:bd:91:c9:a4:98:23:92:b7
Serial Number (int): 19227496616093279577781120852876825271
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6b:6a:6a:f8:80:be:1f:51:06:b4:05:78:5e:b9:20:f1:67:95:70:a2
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): ae:83:07:f3:3e:92:07:06:57:81:a4:60:2b:1b:f2:9f:3a:d0:97:fd
Fingerprint (sha256): 15:50:12:8d:c5:50:3d:42:f8:6d:1d:0d:82:45:28:9e:38:c6:42:51:59:78:e5:38:ed:53:1a:c6:0c:33:17:25

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate sipskype1.deloitte.co.uk

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sipskype1.deloitte.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sipskype1.deloitte.co.uk
wcskype1.deloitte.co.uk
sipskype2.deloitte.co.uk
wcskype2.deloitte.co.uk
siplync31.deloitte.co.uk
sip.deloitte.co.uk

Other certificates including the domain name deloitte.co.uk

(limited to 100 certificates)
aboutdeloitteconnect.com
www.taxpublications.deloitte.co.uk
gpportal.deloitte.co.uk
anywhere.deloitte.co.uk
cronus.deloitte.co.uk
analyticshub.deloitte.co.uk
tdanalytics.deloitte.co.uk
attendanceapp.deloitte.co.uk
staging-surveybench.deloitte.co.uk
compliancelearning.deloitte.co.uk
Discovery.deloitte.co.uk
www.deloitte.co.uk
keys.deloitte.co.uk
ukmrsproxy01.deloitte.co.uk
www.deloitte.co.uk
ghapp.deloitte.co.uk
aboutdeloitteconnect.com
analytics.deloitte.co.uk
Desktop.deloitte.co.uk
mdnetgw1.deloitte.co.uk
surveybench.deloitte.co.uk
ias.deloitte.co.uk
belfast.deloitte.co.uk
belfast.deloitte.co.uk
crisissimulator.deloitte.co.uk
acuity-dev.deloitte.co.uk
ixbrlreview.deloitte.co.uk
dlt.deloitte.co.uk
tsanalytics-dev.deloitte.co.uk
dijv.deloitte.co.uk
ukdc2ise001.uk.deloitte.com
qposapphire.deloitte.co.uk
anywhereUAT.deloitte.co.uk
vatnumberchecker.deloitte.co.uk
dsar.deloitte.co.uk
www.surveyhub.deloitte.co.uk
mercury.tax.deloitte.co.uk
gp-testportal.deloitte.co.uk
mlearning.deloitte.co.uk
aboutdeloitteconnect.com
discovery.deloitte.co.uk
ias.deloitte.co.uk
www.deloitte.co.uk
spotlight.deloitte.co.uk
pr.deloitte.co.uk
qrscms.deloitte.co.uk
sni.cloudflaressl.com
dsar-pre.deloitte.co.uk
gptestportal.deloitte.co.uk
pxs.deloitte.co.uk
gpportal.deloitte.co.uk
psawizard.deloitte.co.uk
spotlight.deloitte.co.uk
dtsresources-management-nonprod.tax.deloitte.co.uk
siplync31.deloitte.co.uk
gptestportal-alternative.deloitte.co.uk
introspect.deloitte.co.uk
mg.deloitte.co.uk
tsanalytics.deloitte.co.uk
smartfuel.deloitte.co.uk
anywhere.deloitte.co.uk
usap42.us.deloitte.com
taina-ocr.deloitte.co.uk
survey.surveybench.deloitte.co.uk
webmail.deloitte.co.uk
usap42.us.deloitte.com
ukgateway11.deloitte.co.uk
dlo.deloitte.co.uk
mourauat.dtrax.deloitte.co.uk
discoverytoken.deloitte.co.uk
associates.deloitte.co.uk
bigplays.deloitte.co.uk
ukdeloittejss.deloitte.co.uk
discoverytoken.deloitte.co.uk
belfast.deloitte.co.uk
nweweb53ext.deloitte.co.uk
email.deloitte.co.uk
dev.smartmiles.deloitte.co.uk
gasurvey.deloitte.co.uk
360.deloitte.co.uk
dplayer.deloitte.co.uk
ihr.deloitte.co.uk
belfast.deloitte.co.uk
usap42.us.deloitte.com
cfcassessor.deloitte.co.uk
sni.cloudflaressl.com
mcert.deloitte.co.uk
connect.deloitte.co.uk
qrscms.deloitte.co.uk
smartfuel.deloitte.co.uk
nweweb53ext.deloitte.co.uk
discovery.deloitte.co.uk
sipskype1.deloitte.co.uk
lyncabs.deloitte.co.uk
psmt-pre.deloitte.co.uk
lifetime.deloitte.co.uk
aboutdeloitteconnect.com
anywhereUAT.deloitte.co.uk
blogs.deloitte.co.uk
www.surveyhub.deloitte.co.uk

Certificate

The complete raw certificate details for sipskype1.deloitte.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4i6axKfEhwkJOM86WeDP
MApj7Q+LjFXC5+dudFqNYLdnyag/6bXrqsLWuH3moUJnHjxS0zk3aUxR46Tp6F3P
ik2gjp2rrb/yZmMHh8ODb+jw08nHfLjR/TCDQVFI9gwkTocRl6RKCEQo9HQQxAX0
XWZtZ+4ImxXrnTsXHSGA58d82wIcImte0zzW9YeVv5GfR3/jrfzmAP+nR/zUZGJH
liXrI/2lx/qkfszWsDo4cNvhBJw/uW6rIE9xvvtNmBeRzTCBbpJlMqVeveVSzZR+
Mj9ZG37su+oSEp9v9eJadAQ6X65WR/+cM7FPdqX8B+Iy5Lj1aDAobFknA2iuWix0
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19227496616093279577781120852876825271
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LONDON'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DELOITTE LLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UKITS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sipskype1.deloitte.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28552838488988928208623304612055152395931445798680358028348997540313834226549803144821439307315681239480813174216597445433400680797431122463412162844976886792300031526214953833487225574158878531573861717019924939367187596494565637261147256280088326700096035361059145196297681894454166534958587688622994979295978744313372451080137237476124590703407179059861692136883030524007217349242918842430197502338126318667577034911431942663855077987170334817060023656859472859206616819695902102278890873589134881600830109408502284639304354192043491880192396827064599281935080186028062825692995021413729844117611099718748459529459
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b6a6af880be1f5106b405785eb920f1679570a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipskype1.deloitte.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcskype1.deloitte.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipskype2.deloitte.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcskype2.deloitte.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siplync31.deloitte.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.deloitte.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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