clicks.food.com

- Warner Bros. Discovery, Inc. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 67:fc:43:14:3a:36:87:2e:a0:9d:2d:11 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Warner Bros. Discovery, Inc.

Organization: Warner Bros. Discovery, Inc.
State / Province: New York
Locality: New York
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 67:fc:43:14:3a:36:87:2e:a0:9d:2d:11
Serial Number (int): 32181922089825351108373851409
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: bc:5e:2f:27:ad:28:45:81:8a:3e:1e:4e:8d:cb:8f:d6:e7:07:be:c0
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 24:b7:18:4f:e2:45:5d:69:a2:a6:9a:96:e7:58:45:21:17:89:57:64
Fingerprint (sha256): 16:b1:52:b0:bd:16:4e:6f:e3:44:f2:2d:be:a9:28:0d:97:00:db:7a:11:d9:30:3c:34:a3:12:bf:55:13:13:0c

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate clicks.food.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clicks.food.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clicks.food.com

Other certificates including the domain name food.com

(limited to 100 certificates)
secure-api.scrippsnetworks.com
uc18.janrainengage.com
gohelp.discovery.com
www.food.com
secure-api.scrippsnetworks.com
gohelp.discovery.com
gohelp.discovery.com
gohelp.discovery.com
www.food.com
secure-api.scrippsnetworks.com
secure-api.scrippsnetworks.com
uc18.janrainengage.com
secure-api.scrippsnetworks.com
uc18.janrainengage.com
www.food.com
secure-api.scrippsnetworks.com
secure-api.scrippsnetworks.com
secure-api.scrippsnetworks.com
gohelp.discovery.com
clicks.food.com
sli.discovery.com
gohelp.discovery.com
secure-api.scrippsnetworks.com
recipes.food.com
mysecure.food.com
uc18.janrainengage.com
sli.discovery.com
secure-api.scrippsnetworks.com
secure-api.scrippsnetworks.com
secure-api.scrippsnetworks.com
gohelp.discovery.com
gohelp.discovery.com
secure-api.scrippsnetworks.com
geniuskitchen.com
uc18.janrainengage.com
uc18.janrainengage.com
gohelp.discovery.com
www.food.com
secure-api.scrippsnetworks.com
sli.discovery.com
secure-api.scrippsnetworks.com
cpapi-test2.travelchannel.com
ssa.food.com
secure-api.scrippsnetworks.com
sli.discovery.com
sli.discovery.com
secure-api.scrippsnetworks.com
api.food.com
cpapi-test1.travelchannel.com
secure-api.scrippsnetworks.com
signin.food.com
mysecure.cookingchanneltv.com
sli.discovery.com
secure-api.scrippsnetworks.com
secure-api.scrippsnetworks.com
foodonthetable.com
sli.discovery.com
ssa.food.com
link.food.com
uc18.janrainengage.com
food.com
uc18.janrainengage.com
uc18.janrainengage.com
uc18.janrainengage.com
gohelp.discovery.com
uc18.janrainengage.com
www.food.com
secure-api.scrippsnetworks.com
sli.discovery.com
sli.discovery.com
api.food.com
cpapi.food.com
foodonthetable.com
uc18.janrainengage.com
www.food.com
uc18.janrainengage.com
geniuskitchen.com

www.food.com
geniuskitchen.com
secure-api.scrippsnetworks.com
cpapi-test1.travelchannel.com
sli.discovery.com
uc18.janrainengage.com
sli.discovery.com
cpapi.food.com
uc18.janrainengage.com
cpapi-test1.hgtv.com
*.food.com
ssa.food.com
geniuskitchen.com
uc18.janrainengage.com
foodonthetable.com
www.food.com
sli.discovery.com
uc18.janrainengage.com
secure-api.scrippsnetworks.com
secure-api.scrippsnetworks.com
ssa.food.com
*.food.com

Certificate

The complete raw certificate details for clicks.food.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIMZ/xDFDo2hy6gnS0RMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yNDAzMTUxMzIxMTlaFw0y
NTA0MTYxMzIxMThaMHQxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhOZXcgWW9yazER
MA8GA1UEBxMITmV3IFlvcmsxJTAjBgNVBAoTHFdhcm5lciBCcm9zLiBEaXNjb3Zl
cnksIEluYy4xGDAWBgNVBAMTD2NsaWNrcy5mb29kLmNvbTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKYIamVGeapl3Xi5/z6yYwKb9mCeu7mcQqRRF61F
KLe2zj2DuF9b5NMGA2PJQfMKOKBmG3pE6SW5S475mNzIj8eIIWvxTFQW/0A+5qR7
45HG++dbORpBHu5WLDLCvficojKr6gplTWHFGGpXbih1Ac4Ii7gNZ9DOPa9vIgF0
STmsd6hpWPZqFiHyQ7KINDs6sIuGQIjW6fC6SulhuXCtP9R8nSWYIcYuhvon3m6E
vgBPLYWl5DXEuKKvVM3OcHWeNHR++jZ/qU5wUtTXOcUS7pQSL4kun36z42tUkhhM
rPdX+WedM7wCqP+R/Rzfjtokv1UxbMbyGtVV0VgcQAzckrUCAwEAAaOCAZswggGX
MA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMIGOBggrBgEFBQcBAQSBgTB/
MEQGCCsGAQUFBzAChjhodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2Vy
dC9nc3JzYW92c3NsY2EyMDE4LmNydDA3BggrBgEFBQcwAYYraHR0cDovL29jc3Au
Z2xvYmFsc2lnbi5jb20vZ3Nyc2FvdnNzbGNhMjAxODBWBgNVHSAETzBNMEEGCSsG
AQQBoDIBFDA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNv
bS9yZXBvc2l0b3J5LzAIBgZngQwBAgIwGgYDVR0RBBMwEYIPY2xpY2tzLmZvb2Qu
Y29tMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBT4
73/yzXhnqN5vjySNiPGHAwKz6zAdBgNVHQ4EFgQUvF4vJ60oRYGKPh5OjcuP1ucH
vsAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBABPqTUyW
US+VGUXMsuaVi1v9GyS50KSPrF47mu9YzSbADqwU3iRg1vwl8uLbxVmZYcFZzAcx
faN068PMPdjPu28ldKVRZUsUeIsIqGwmzsp50/QrmzFSwUTtkfn/jJHGEPBhO54z
cODWUpLujs+GRzEzQ4VsDqNZCqMF1SM98VBIHaTiMWJqRYz30gB2JbjU+3LRsj1c
hLW0SP+68cLFSes8pRFqcNwFVmTOH2GYJDjb1Nc5AkGUqkWTciyZPTyevJZ3nrbD
CBPlVTU+nMEgrcrYcQADI/X9WAwhSR+kjE5BS4Q7YQHPQoVeQ10oUiwlWh95d5sI
abXON6k9xWxDUKc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApghqZUZ5qmXdeLn/PrJj
Apv2YJ67uZxCpFEXrUUot7bOPYO4X1vk0wYDY8lB8wo4oGYbekTpJblLjvmY3MiP
x4gha/FMVBb/QD7mpHvjkcb751s5GkEe7lYsMsK9+JyiMqvqCmVNYcUYalduKHUB
zgiLuA1n0M49r28iAXRJOax3qGlY9moWIfJDsog0Ozqwi4ZAiNbp8LpK6WG5cK0/
1HydJZghxi6G+ifeboS+AE8thaXkNcS4oq9Uzc5wdZ40dH76Nn+pTnBS1Nc5xRLu
lBIviS6ffrPja1SSGEys91f5Z50zvAKo/5H9HN+O2iS/VTFsxvIa1VXRWBxADNyS
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 32181922089825351108373851409
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 13:21:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-16 13:21:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Warner Bros. Discovery, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clicks.food.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20959708515259372388126977834498003379805492165864450561772462652723793238255997132004220309431007586341170372818734542914539778588837314319028932846174018846713882181072789269071174702046193184348381019438828852906105149519868310749270850848257620574864758845226729036927402766754299130381162725234597548166690771890272800598067720586475967403814258876686746059570787174182254830653002626873100122072889025413779136890968074099328495444513573305540568614978530762210762845718014256064324109235696681774141623582517334445611242084156840323532082915003317747936313351395100909400501973253639665680874589034963361632949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clicks.food.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc5e2f27ad2845818a3e1e4e8dcb8fd6e707bec0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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