tickets.dotdigital.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 0c:f4:8c:96:84:e1:2e:0e:2a:00:fc:08:f7:39:e8:d8 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=tickets.dotdigital.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0c:f4:8c:96:84:e1:2e:0e:2a:00:fc:08:f7:39:e8:d8Serial Number (int): 17220507845594623885687283211090651352
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: b4:b2:2d:34:7c:66:35:ef:f8:16:8b:15:12:f7:98:68:01:ae:6c:28
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 42:50:52:d8:23:52:f7:48:da:5e:85:43:21:8b:d3:c1:20:ed:a1:f0
Fingerprint (sha256): 20:f0:ef:29:bb:38:9f:53:50:b0:49:d7:de:d1:56:07:db:a7:52:21:d9:d9:c8:34:76:8b:a9:db:9b:ea:f4:65
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate tickets.dotdigital.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for tickets.dotdigital.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
tickets.dotdigital.com
Other certificates including the domain name dotdigital.com
(limited to 100 certificates)
systemstatus.rrc.ca
status.hpiinc.com
*.dotdigital.com
servicestation.dotdigital.com
dynco-cpaas.staging.dotdigital.com
r2-login.dotdigital.com
status.digitary.net
developer.dotdigital.com
r1-app.dotdigital.com
cc3.status.jasper.com
r1-login.dotdigital.com
status.addresscloud.com
cc3.status.jasper.com
customersuccess.dotdigital.com
developer-cpaas.dotdigital.com
jose.dotdigital.com
*.dotdigital.com
endpointprotection.status.symantec.com
r3-login-stg.dotdigital.com
statusp.dotdigital.com
integrations.dotdigital.com
stg.dotdigitalstatus.com
status.atera.com
dotdigital.com
learning.dotdigital.com
www.dotdigital.com
statuspage.vantage.online
r3-login.dotdigital.com
docs.cpaas.dotdigital.com
customisations-cpaas.staging.dotdigital.com
developer.dotdigital.com
status.addresscloud.com
cc3.status.jasper.com
r1-login.dotdigital.com
cc3.status.jasper.com
apps-cpaas.staging.dotdigital.com
dotdigital.com
systemstatus.rrc.ca
apps-cpaas.dotdigital.com
r2-app.dotdigital.com
cc3.status.jasper.com
email.dotdigital.com
*.thor.dotdigital.com
dynco-cpaas.staging.dotdigital.com
dynco-cpaas.dotdigital.com
r3-login.dotdigital.com
apps-cpaas.staging.dotdigital.com
apps-cpaas.staging.dotdigital.com
status.addresscloud.com
r3-app-stg.dotdigital.com
marketing.dotdigital.com
r2-app.dotdigital.com
cc3.status.jasper.com
docs.cpaas.dotdigital.com
developer.dotdigital.com
cc3.status.jasper.com
endpointprotection.status.symantec.com
r1-login-stg.dotdigital.com
r1-admin.dotdigital.com
apps-cpaas.staging.dotdigital.com
cc3.status.jasper.com
status.ssactivewear.com
cc3.status.jasper.com
status.addresscloud.com
developer.dotdigital.com
r1-app.dotdigital.com
status.reliancenetwork.com
status.crewbuilder.ca
endpointprotection.status.symantec.com
r2-admin.dotdigital.com
support.dotdigital.com
email.dotdigital.com
r3-app.dotdigital.com
caloes-status.ravemobilesafety.com
status.c9cg.com
*.dotdigital.com
status-uk.highq.com
r1-admin.dotdigital.com
developer.dotdigital.com
apps-cpaas.staging.dotdigital.com
tickets.dotdigital.com
status.ssactivewear.com
learning.dotdigital.com
servicestation.dotdigital.com
marketing.dotdigital.com
menustatus.omnivore.io
dotdigital.com
mad-test.staging.dotdigital.com
systemstatus.rrc.ca
r3-app.dotdigital.com
r2-admin.dotdigital.com
status.crewbuilder.ca
dotdigital.com
status-uk.highq.com
status-uk.highq.com
login.dotdigital.com
login.dotdigital.com
status.reliancenetwork.com
status.atera.com
stg.dotdigitalstatus.com
status.hpiinc.com
*.dotdigital.com
servicestation.dotdigital.com
dynco-cpaas.staging.dotdigital.com
r2-login.dotdigital.com
status.digitary.net
developer.dotdigital.com
r1-app.dotdigital.com
cc3.status.jasper.com
r1-login.dotdigital.com
status.addresscloud.com
cc3.status.jasper.com
customersuccess.dotdigital.com
developer-cpaas.dotdigital.com
jose.dotdigital.com
*.dotdigital.com
endpointprotection.status.symantec.com
r3-login-stg.dotdigital.com
statusp.dotdigital.com
integrations.dotdigital.com
stg.dotdigitalstatus.com
status.atera.com
dotdigital.com
learning.dotdigital.com
www.dotdigital.com
statuspage.vantage.online
r3-login.dotdigital.com
docs.cpaas.dotdigital.com
customisations-cpaas.staging.dotdigital.com
developer.dotdigital.com
status.addresscloud.com
cc3.status.jasper.com
r1-login.dotdigital.com
cc3.status.jasper.com
apps-cpaas.staging.dotdigital.com
dotdigital.com
systemstatus.rrc.ca
apps-cpaas.dotdigital.com
r2-app.dotdigital.com
cc3.status.jasper.com
email.dotdigital.com
*.thor.dotdigital.com
dynco-cpaas.staging.dotdigital.com
dynco-cpaas.dotdigital.com
r3-login.dotdigital.com
apps-cpaas.staging.dotdigital.com
apps-cpaas.staging.dotdigital.com
status.addresscloud.com
r3-app-stg.dotdigital.com
marketing.dotdigital.com
r2-app.dotdigital.com
cc3.status.jasper.com
docs.cpaas.dotdigital.com
developer.dotdigital.com
cc3.status.jasper.com
endpointprotection.status.symantec.com
r1-login-stg.dotdigital.com
r1-admin.dotdigital.com
apps-cpaas.staging.dotdigital.com
cc3.status.jasper.com
status.ssactivewear.com
cc3.status.jasper.com
status.addresscloud.com
developer.dotdigital.com
r1-app.dotdigital.com
status.reliancenetwork.com
status.crewbuilder.ca
endpointprotection.status.symantec.com
r2-admin.dotdigital.com
support.dotdigital.com
email.dotdigital.com
r3-app.dotdigital.com
caloes-status.ravemobilesafety.com
status.c9cg.com
*.dotdigital.com
status-uk.highq.com
r1-admin.dotdigital.com
developer.dotdigital.com
apps-cpaas.staging.dotdigital.com
tickets.dotdigital.com
status.ssactivewear.com
learning.dotdigital.com
servicestation.dotdigital.com
marketing.dotdigital.com
menustatus.omnivore.io
dotdigital.com
mad-test.staging.dotdigital.com
systemstatus.rrc.ca
r3-app.dotdigital.com
r2-admin.dotdigital.com
status.crewbuilder.ca
dotdigital.com
status-uk.highq.com
status-uk.highq.com
login.dotdigital.com
login.dotdigital.com
status.reliancenetwork.com
status.atera.com
stg.dotdigitalstatus.com
Certificate
The complete raw certificate details for tickets.dotdigital.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEazCCA1OgAwIBAgIQDPSMloThLg4qAPwI9zno2DANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDYwOTAwMDAwMFoXDTI0MDcwNzIzNTk1OVowITEf MB0GA1UEAxMWdGlja2V0cy5kb3RkaWdpdGFsLmNvbTCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAJPNf+xxugszj3G3ySr0R8mGqeL1TjidjGisE/mVp/P7 KuLcC2qqJxMVuGazVCYgzDTEuV1Gr20V5WrTLYdqFQfd9t8esBag0lYdhx+a3q8n gy2fn5EBbRqpFkxOEXAi53O/iDj2i7bufMhJTUtDlUVGfFE6tG8F4U3mCO3o5MCI 1Gd1HYwTwcUdYBPn0fUtSrdpmDsX8znPTOdRAbvkrlG6lsNix/KDClnwaZBynnpG nFTcH19cy/vqmZF+IlvF9MfpXw3+BHHae0Q1blSeKcS+R9zzL+qBHB9rt1h0B1jH 8Tkxe7PGH8xy33TCgPB/ejSnfyRicHnOTMCjww6vyN0CAwEAAaOCAYIwggF+MB8G A1UdIwQYMBaAFIG4DmOKiRIY5fo7O1CVn+blkBOFMB0GA1UdDgQWBBS0si00fGY1 7/gWixUS95hoAa5sKDAhBgNVHREEGjAYghZ0aWNrZXRzLmRvdGRpZ2l0YWwuY29t MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw OwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMS5hbWF6b250cnVzdC5j b20vcjJtMDEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkw ZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDEuYW1hem9udHJ1c3QuY29t MDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAxLmFtYXpvbnRydXN0LmNvbS9y Mm0wMS5jZXIwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkq hkiG9w0BAQsFAAOCAQEA5aQ/QfC3w4capagSWjM/DRsl+5OC8fAfytGN3BNJmesi uzEEafFIHpjc5YRcgrf3GDUciBk14hPIrmy5MLa0EiE5nrNVVDo6M17Mc3WePG9b 6Do/DHX/wDd5wir1dQpc8rdzVi3nzDYB5YXQQiHnJmvbB9Gx90fJbdekmCyK+ni6 Yy0WpyQ1UrbCwdWmwuj1EHxTaNEWedlGIt3H6tqQrhpLQ+cKPyl1WC+hu18ZgpDH 7nKOhp/6fHb5eX3R0a/NSgu6yHopd8/bkSNPT5rgeDMHm7N0Vx3HBlwNH6WEQigP ErCC646jQ/rSVUYMgoa9EKVVwakRcS+C6t6BezWkQw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk81/7HG6CzOPcbfJKvRH yYap4vVOOJ2MaKwT+ZWn8/sq4twLaqonExW4ZrNUJiDMNMS5XUavbRXlatMth2oV B9323x6wFqDSVh2HH5reryeDLZ+fkQFtGqkWTE4RcCLnc7+IOPaLtu58yElNS0OV RUZ8UTq0bwXhTeYI7ejkwIjUZ3UdjBPBxR1gE+fR9S1Kt2mYOxfzOc9M51EBu+Su UbqWw2LH8oMKWfBpkHKeekacVNwfX1zL++qZkX4iW8X0x+lfDf4Ecdp7RDVuVJ4p xL5H3PMv6oEcH2u3WHQHWMfxOTF7s8YfzHLfdMKA8H96NKd/JGJwec5MwKPDDq/I 3QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17220507845594623885687283211090651352 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-07 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tickets.dotdigital.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18658366509703492176754800552350935028594064994156504613776387724326019963423759332363480457135114346394914509059784682832603079909896768989745555426721014206189643897461861722805791060001329694704188619139413180778987920773606702707436704785976174669190659189937020546506096680061678805706506244686727661508709367542455985756787084668873857272800756730918964213809457219976057767189368484419537412624595831930604025619514436366259585619399938814601388482138081337546567686326932017795479680805543430923485261534308122615819527713472520830969030324546816167762383356399107384622648272351206724049488703616044780996829 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b4b22d347c6635eff8168b1512f7986801ae6c28 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.dotdigital.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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