drf-pricing.qa.mx.dsm.app

Issued by Amazon

About this certificate

This digital certificate with serial number 04:45:81:64:35:85:e6:43:5f:d4:88:b8:62:1e:31:8a was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=drf-pricing.qa.mx.dsm.app

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:45:81:64:35:85:e6:43:5f:d4:88:b8:62:1e:31:8a
Serial Number (int): 5677804836598269131570522771404239242
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 29:cc:32:f9:d9:4a:0c:12:d5:0a:58:fb:e9:45:f5:47:43:1c:82:ac
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 39:3a:3c:72:cd:83:7c:22:ab:90:d0:e9:67:e4:12:26:a0:49:89:a4
Fingerprint (sha256): 17:55:64:11:f8:ce:b2:9c:38:63:c5:37:21:7c:2f:a8:25:dc:17:cf:fa:5d:87:12:c4:c2:50:34:4a:b1:88:49

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate drf-pricing.qa.mx.dsm.app

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for drf-pricing.qa.mx.dsm.app

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

drf-pricing.qa.mx.dsm.app

Other certificates including the domain name dsm.app

(limited to 100 certificates)
pss-blocks.qa.mx.dsm.app
drf-pricing.qa.mx.dsm.app
talentmanagment.dev.mx.dsm.app
drf-kpi.qa.mx.dsm.app
hof-ic.qa.mx.dsm.app
delvotest.qa.mx.dsm.app
creditportal.qa.mx.dsm.app
hrss-vacation.dev.mx.dsm.app
yellow-rim.qa.mx.dsm.app
dnpcustomercare.mx.dsm.app
supplychain.qa.mx.dsm.app
hof-ic.dev.mx.dsm.app
drf-pricing.qa.mx.dsm.app
pss-utt-enhance.dev.mx.dsm.app
ifinder.dev.mx.dsm.app
trust-it.mx.dsm.app
drf-kpi.qa.mx.dsm.app
dnpcustomercare.dev.mx.dsm.app
pss-utt-enhance.qa.mx.dsm.app
hrss-letter.dev.mx.dsm.app
deskq.dev.mx.dsm.app
ip-portal.mx.dsm.app
dicivaluereport.qa.mx.dsm.app
*.dev.mx.dsm.app
dfs-materials.qa.mx.dsm.app
smartaudit.mx.dsm.app
hrss-nl-letter.dev.mx.dsm.app
pss-blocks.qa.mx.dsm.app
drf-kpi.qa.mx.dsm.app
anh-quotations.qa.mx.dsm.app
premfreight.dev.mx.dsm.app
bls-assesment.mx.dsm.app
mdm-csu.qa.mx.dsm.app
invoiceportal.dev.mx.dsm.app
hrss-vacation.qa.mx.dsm.app
ra-ps-request.qa.mx.dsm.app
drf-kpi.qa.mx.dsm.app
dnp-orderportal.qa.mx.dsm.app
dnp-orderportal.dev.mx.dsm.app
hof-ic.qa.mx.dsm.app
mx8-test.qa.mx.dsm.app
uh-spc-chart.dev.mx.dsm.app
complaintmgmt.mx.dsm.app
animaltrials.dev.mx.dsm.app
ip-portal.qa.mx.dsm.app
invoiceportal.qa.mx.dsm.app
dnplubtrack.dev.mx.dsm.app
drf-kpi.qa.mx.dsm.app
drf-pricing.mx.dsm.app
nhbs-tool.dev.mx.dsm.app
phagebook.dev.mx.dsm.app
cultureai.crp-dt-biotech.prj.analytics.dsm.app
dfs-materials.dev.mx.dsm.app
pcafa.qa.mx.dsm.app
dfs-materials.mx.dsm.app
simple-scan.qa.mx.dsm.app
drf-kpi.qa.mx.dsm.app
c4c-hr.qa.mx.dsm.app
p36scan2sap.dev.mx.dsm.app
quantumadvisor.qa.mx.dsm.app
cbs-opex.qa.mx.dsm.app
dnplubtrack.dev.mx.dsm.app
sif-share.qa.mx.dsm.app
contractadmin.dev.mx.dsm.app
dicivaluereport.qa.mx.dsm.app
anh-quotations.qa.mx.dsm.app
nutriview.dev.mx.dsm.app
drf-kpi.qa.mx.dsm.app
trust-it.mx.dsm.app
animaltrials.mx.dsm.app
drf-pricing.mx.dsm.app
cer-tool.qa.mx.dsm.app
dsmdashboard.dev.mx.dsm.app
drf-pricing.qa.mx.dsm.app
trust-it-v2.qa.mx.dsm.app
quotations.qa.mx.dsm.app
test-offline.dev.mx.dsm.app
sitevisitor.qa.mx.dsm.app
dmfs.dev.mx.dsm.app
bls-assesment.mx.dsm.app
drf-pricing.qa.mx.dsm.app
batchtracking.qa.mx.dsm.app
c4c-crm.qa.mx.dsm.app
she.qa.mx.dsm.app
drf-kpi.qa.mx.dsm.app
strinsights.qa.mx.dsm.app
trust-it.dev.mx.dsm.app
quotations.mx.dsm.app
cumulus.dev.mx.dsm.app
budelpack.qa.mx.dsm.app
hof-approvals.mx.dsm.app
trust-it.dev.mx.dsm.app
airfreight.dev.mx.dsm.app
air-freight.dev.mx.dsm.app
pss-mail.mx.dsm.app
contractmanager.dev.mx.dsm.app
dep-mdw.qa.mx.dsm.app
sunny-pay.dev.mx.dsm.app
dfs-notify.dev.mx.dsm.app
sif-share.mx.dsm.app

Certificate

The complete raw certificate details for drf-pricing.qa.mx.dsm.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEiDCCA3CgAwIBAgIQBEWBZDWF5kNf1Ii4Yh4xijANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAzMjQwMDAwMDBaFw0yMTA0MjQx
MjAwMDBaMCQxIjAgBgNVBAMTGWRyZi1wcmljaW5nLnFhLm14LmRzbS5hcHAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkA5/aObTjvhxoIUlJDK0NASQp
+eXcbpof4fS5MRCWh+7HFnYv8HPkuwvoC5xpEmdsXT/r4p6BaEWyW0xLZ6Wt16km
La0DdwTxd88mRUtrAVjLGJYO9wlMux8m4svkncTU+nfeLKZPEvSULFXaNqYHT19o
Xg8ejy3sxo2Ysz3Wr71d6+1aK5H/s4DaOx+DJmf8/KACPK7rQYNfyLUoC2jpGbxQ
QxxZYb4UG2VXmRfumimKh7TxRrt0jmtuufxsh2+a69B/MXB5QXjj0qYrw4ZVJjAh
6V/BpfHla837szBUXO6jpOm7A3yOdjYEuAXJDdtbI3h9LFgUSZwJkoLoMghvAgMB
AAGjggGSMIIBjjAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNV
HQ4EFgQUKcwy+dlKDBLVClj76UX1R0McgqwwJAYDVR0RBB0wG4IZZHJmLXByaWNp
bmcucWEubXguZHNtLmFwcDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2Nh
MWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG
/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRw
Oi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6
Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8E
AjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAyonoJ
IMDO4Js5UbaXouKyLSM8GtrjRUQRlh3ZGXXSOnEJQeNZg2XDxUzUMmwOZCUTVNFp
AASregibiNQDxhSRwWUcXeu8nAgkrgyKbysPUsmHkg0+kU9aHTfo+jU447oRGHdR
8K+ooa9OKq4UhDXrfh+OawprseOmrLzm4oslvb0W3WvWergbyCEqiFamcKRzMDqZ
YDmdVorOpBp5xq2TPgAfnzWc7pDayzAiZfoDm0lXLVnqfiDC/tjN8tkMMXP011QP
aAHgDOeX756dSp+GptQG78y+GKhBjzz1Vif7i9GEa856iVQaFyCIveLt0z9c29A+
upAzfITcKWJVmxWs
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAOf2jm0474caCFJSQyt
DQEkKfnl3G6aH+H0uTEQlofuxxZ2L/Bz5LsL6AucaRJnbF0/6+KegWhFsltMS2el
rdepJi2tA3cE8XfPJkVLawFYyxiWDvcJTLsfJuLL5J3E1Pp33iymTxL0lCxV2jam
B09faF4PHo8t7MaNmLM91q+9XevtWiuR/7OA2jsfgyZn/PygAjyu60GDX8i1KAto
6Rm8UEMcWWG+FBtlV5kX7popioe08Ua7dI5rbrn8bIdvmuvQfzFweUF449KmK8OG
VSYwIelfwaXx5WvN+7MwVFzuo6TpuwN8jnY2BLgFyQ3bWyN4fSxYFEmcCZKC6DII
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5677804836598269131570522771404239242
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'drf-pricing.qa.mx.dsm.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20704869284325995063200599502508014503047229143354211046885682169151647395837420530918627384534668746921349453414236524699951272535498251230316163400911008543346218680658918681261924236139968032033081605972451124087502241348211625804302291346521553361457986311097200682146979511429705607127486229783737934248854621040267934525175547620998004158155827667274302429616359692495324978116145724913319489696254286537170878730219053232364046922591319547132890475940677896950355913655837325017254068191859012208387628483211159831307068120604492724629486682314315507626124637116209758955598831441491390536542586435701734246511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29cc32f9d94a0c12d50a58fbe945f547431c82ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drf-pricing.qa.mx.dsm.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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