bookin.newgen.co
Issued by Amazon
About this certificate
This digital certificate with serial number 07:c7:9c:27:ca:fa:73:0c:76:7c:a8:37:69:9e:13:0b was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=bookin.newgen.co
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:c7:9c:27:ca:fa:73:0c:76:7c:a8:37:69:9e:13:0bSerial Number (int): 10341030253958096266159224130224657163
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 06:1d:3f:11:7b:63:fe:6e:12:fa:1d:2a:5f:3a:0f:cc:f9:fa:93:66
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 81:bd:37:96:62:b1:e9:6a:63:5f:a2:08:d7:2a:a2:57:84:65:5b:60
Fingerprint (sha256): 19:1d:b6:9d:6d:f4:b8:d7:61:fa:f6:81:ae:3d:d3:4f:0b:61:fc:30:46:51:75:6d:e0:01:94:b7:5b:c4:de:ee
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate bookin.newgen.co
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bookin.newgen.co
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bookin.newgen.co
Other certificates including the domain name newgen.co
(limited to 100 certificates)
www.zeroinbox.app
*.newgen.co
app.coughresearch.ai
terrapinchallenge.com
rdm.planoboard.de
cadmiamedical.com
staging.poznej.pingl.app
www.thinkwithin.app
160th.stvincents.nsw.edu.au
findjobfor.me
tri.newgen.co
duck-tap.com
ibakurov.com
customer-connect.cookdup.com
lifeium.app
showroom.next-audit.de
www.houstonathleticscamps.com
trailseeker.app
weekincardano.com
glamup.cl
jerrypenaflorida.com
app.campaignguru.app
genrephile.com
get.meterie.com
worksp.com
analytics.playshifu.com
demo.redacted.ai
demo.redacted.ai
app.divdot.com
advisor.im
leaderonline.uz
www.mandawin.co
www.eatingkindly.com
bookin.newgen.co
airtables.app
staging.wayfind.health
brianwool.com
www.telstonandmereworth.cc
*.newgen.co
mob.newgen.co
t.vipaylife.com
giacapp.com
sourcethe.coffee
payee-link.likid.co.jp
smart-0000sm.ekitan.biz
www.fastapp.com.ec
timothyjordan.me
ebcard.business
thecompendium.cards
fl-moldexperts.com
www.ovidiu.nl
mellow.love
giacapp.com
prefeituras.nfe.io
web.remote-work.app
myownbook.newgen.co
www.frycsa.com.mx
note.doando.club
holidaysportsmanshow.com
lane-test.oresundsbron.com
www.kamdhenusweets.co
app.bitpong.it
www.lantheusvirtual2020.com
*.newgen.co
findjobfor.me
bloo-management.com
www.selvam.net
ey3k0n.io
nicenboim.com
www.organizados.com.br
meter.fallara.net
*.newgen.co
astrofetus.space
pepperwinervpark.org
trindiasourcing.newgen.co
tabingo.com
staging.givebee.co
www.daedalus-cnc.com
kruispunt.citolab.nl
apnetruck.com
dev.tomilkieway.com
www.tacstorm.com
www.adop.co.jp
tabilabo.co.jp
ajhp.newgen.co
0b.sk
www.cercanosapp.com
*.newgen.co
zeropad.net
get.pixapuzzle.app
memeshoot.com
admin.civitime.com
slugtrack.org
resume.waypointdev.net
www.findmy.contractors
ys.app.qnnre.work
www.hungryguygames.com
www.writeboardtechnologies.com
analicebarreto.com.br
trueahead.no
*.newgen.co
app.coughresearch.ai
terrapinchallenge.com
rdm.planoboard.de
cadmiamedical.com
staging.poznej.pingl.app
www.thinkwithin.app
160th.stvincents.nsw.edu.au
findjobfor.me
tri.newgen.co
duck-tap.com
ibakurov.com
customer-connect.cookdup.com
lifeium.app
showroom.next-audit.de
www.houstonathleticscamps.com
trailseeker.app
weekincardano.com
glamup.cl
jerrypenaflorida.com
app.campaignguru.app
genrephile.com
get.meterie.com
worksp.com
analytics.playshifu.com
demo.redacted.ai
demo.redacted.ai
app.divdot.com
advisor.im
leaderonline.uz
www.mandawin.co
www.eatingkindly.com
bookin.newgen.co
airtables.app
staging.wayfind.health
brianwool.com
www.telstonandmereworth.cc
*.newgen.co
mob.newgen.co
t.vipaylife.com
giacapp.com
sourcethe.coffee
payee-link.likid.co.jp
smart-0000sm.ekitan.biz
www.fastapp.com.ec
timothyjordan.me
ebcard.business
thecompendium.cards
fl-moldexperts.com
www.ovidiu.nl
mellow.love
giacapp.com
prefeituras.nfe.io
web.remote-work.app
myownbook.newgen.co
www.frycsa.com.mx
note.doando.club
holidaysportsmanshow.com
lane-test.oresundsbron.com
www.kamdhenusweets.co
app.bitpong.it
www.lantheusvirtual2020.com
*.newgen.co
findjobfor.me
bloo-management.com
www.selvam.net
ey3k0n.io
nicenboim.com
www.organizados.com.br
meter.fallara.net
*.newgen.co
astrofetus.space
pepperwinervpark.org
trindiasourcing.newgen.co
tabingo.com
staging.givebee.co
www.daedalus-cnc.com
kruispunt.citolab.nl
apnetruck.com
dev.tomilkieway.com
www.tacstorm.com
www.adop.co.jp
tabilabo.co.jp
ajhp.newgen.co
0b.sk
www.cercanosapp.com
*.newgen.co
zeropad.net
get.pixapuzzle.app
memeshoot.com
admin.civitime.com
slugtrack.org
resume.waypointdev.net
www.findmy.contractors
ys.app.qnnre.work
www.hungryguygames.com
www.writeboardtechnologies.com
analicebarreto.com.br
trueahead.no
Certificate
The complete raw certificate details for bookin.newgen.co in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEdjCCA16gAwIBAgIQB8ecJ8r6cwx2fKg3aZ4TCzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAxMDIwMDAwMDBaFw0yMTAyMDIx MjAwMDBaMBsxGTAXBgNVBAMTEGJvb2tpbi5uZXdnZW4uY28wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDNyCwTd0YXrXtxJolfHPA3kiHvNClf86Ujik8t XrqhDFOigzUwer4rbqjtFAnGtwlj+o+2POa5ToacQizuevUjmP6UheWhxiICfGco jkUIYQ80Jyg+PuzW7UFfT/bj2ipvysmHC4Yev6VBgOpygQbO7yDKCJJzp58RfYli kEy58JzSWm9sp7AK/LmYXLk8jsdtAbLt0OotViREUtVLpR1eNxTynyz5+luRksoW Z3dlMJcTnW8I1YG/453gZPVh5BX3v1lp93y51TBWdgvQYDSnH5eRiKImKZ5GFQuU bHZLUw5VJYO9fXW0dyREbS3XBZqyc+EGDkn708MqYSpnVlhfAgMBAAGjggGJMIIB hTAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUBh0/ EXtj/m4S+h0qXzoPzPn6k2YwGwYDVR0RBBQwEoIQYm9va2luLm5ld2dlbi5jbzAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsG A1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29t L3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYI KwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6 b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9u dHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMB Af8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCfnfCZQLom4/WCl7VC/ocwJwnLevKY 8R29QS+yCaBGl7s/1+jX/vGlHsE5aPJKBKXexrmkwV4VwXZX76mG/XpAerGYUbUK 9uF5oTAUzk3mgdfGTFzbJlTJVt9ww062+YMuY7kdx09GNuY1RLQ6PS6FsWcT/OSx kmrw1kCZwxOVdO8+9V+VVK25gCpH8B2ggxh01gvOsxp1CFe6CTOZCUGQeE8ugue3 lRrDLyOXa2B2gEswM1y/8CYeBikrRqzi/XE9Km2SbdkhUFyG54DcBPr592p9G/N0 ZqBEOILbAcSnzgmLrrviSHlXkSMyTSdO6nUgKLMU/w/XAOpDebfhVdMY -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcgsE3dGF617cSaJXxzw N5Ih7zQpX/OlI4pPLV66oQxTooM1MHq+K26o7RQJxrcJY/qPtjzmuU6GnEIs7nr1 I5j+lIXlocYiAnxnKI5FCGEPNCcoPj7s1u1BX0/249oqb8rJhwuGHr+lQYDqcoEG zu8gygiSc6efEX2JYpBMufCc0lpvbKewCvy5mFy5PI7HbQGy7dDqLVYkRFLVS6Ud XjcU8p8s+fpbkZLKFmd3ZTCXE51vCNWBv+Od4GT1YeQV979Zafd8udUwVnYL0GA0 px+XkYiiJimeRhULlGx2S1MOVSWDvX11tHckRG0t1wWasnPhBg5J+9PDKmEqZ1ZY XwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10341030253958096266159224130224657163 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-02 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bookin.newgen.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25977561094987212638151086451506352431646113196552314363679414171064875835392196700100524871989376603059607011337043391549947916740707126685172966616425716759003079826425398278342692508910036621490422551382109197038245516615270130709346100608843450257836512669865385658044329653862684668167860330919649565302849453426081909241696352861869080005854178491487730091041354804110075438269731249667235250208172853423535803683706873153481753754162782352962500022107676321711655491486912121346562013064972132670746935336864298133088571303463409545245715156868862416620347708226204983957302547713814881733347618971707535415391 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 061d3f117b63fe6e12fa1d2a5f3a0fccf9fa9366 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookin.newgen.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 009f9df09940ba26e3f58297b542fe87302709cb7af298f11dbd412fb209a04697bb3fd7e8d7fef1a51ec13968f24a04a5dec6b9a4c15e15c17657efa986fd7a407ab19851b50af6e179a13014ce4de681d7c64c5cdb2654c956df70c34eb6f9832e63b91dc74f4636e63544b43a3d2e85b16713fce4b1926af0d64099c3139574ef3ef55f9554adb9802a47f01da0831874d60bceb31a750857ba093399094190784f2e82e7b7951ac32f23976b6076804b30335cbff0261e06292b46ace2fd713d2a6d926dd921505c86e780dc04faf9f76a7d1bf37466a0443882db01c4a7ce098baebbe24879579123324d274eea752028b314ff0fd700ea4379b7e155d318