queue.ticketania.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:cf:42:8f:8e:8c:91:1d:b7:6d:a5:ca:ed:78:46:8e was issued on by Amazon.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=queue.ticketania.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:cf:42:8f:8e:8c:91:1d:b7:6d:a5:ca:ed:78:46:8e
Serial Number (int): 14368435420343754898882184590220871310
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 24:a1:b3:1a:67:7a:41:2e:a5:8b:cb:fd:17:e5:a7:b8:16:84:c0:2b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 60:ce:f4:ec:73:19:9b:ba:93:eb:8d:a8:df:40:b4:78:01:32:35:b5
Fingerprint (sha256): 21:91:c3:71:28:f8:0d:0a:8b:98:94:81:fa:f8:d8:ac:da:f8:7a:b9:04:db:55:84:89:e8:8f:1c:a9:0a:53:2f

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate queue.ticketania.com

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for queue.ticketania.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

queue.ticketania.com
queue.ticketarena.co.uk
harrypotterqueue.travelcircus.de
dragoiscoming.tieks.com
queue.scandlines.com
queue.hakuapp.com
storequeue.wizards.com
go.aspiraconnect.com
queue.fanfares.cathaypacific.com
queue.sky.ch
queue.fairphone.com
queue.uhuu.com
queue.hlg.uhuu.com
stg-queue.hakuapp.com
queue.amctheatres.com
q.axs.nu
waiting.seaworldparks.com
attente.feq2019.com
wait.thepga.com
queue.ticketfairy.com
queue.atgtickets.com
line.universe.com
wait.loud-project.com
queue.tkt.ge
wait.fenty.com
queue.accesofan.com
queue.hkairportshop.com
queue.stage.amctheatres.com

Other certificates including the domain name ticketania.com

(limited to 100 certificates)
v3.ticketania.com
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
queue.ticketania.com
sslcertificate2.queue-it.net
queue.ticketania.com
queue.ticketania.com
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
queue.ticketania.com
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate7.queue-it.net
sslcertificate2.queue-it.net
queue.ticketania.com
queue.ticketania.com
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
ticketania.com
queue.ticketania.com
mosa2balablabla.ticketania.com
sslcertificate2.queue-it.net
mosa2balablabla.ticketania.com
sslcertificate2.queue-it.net
queue.ticketania.com
sslcertificate1.test.queue-it.net
secure.ticketania.com
queue.ticketania.com
sslcertificate2.queue-it.net
secure.ticketania.com
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate3.queue-it.net
sslcertificate2.queue-it.net
queue.ticketania.com
sslcertificate2.queue-it.net
queue.ticketania.com
v3.ticketania.com
queue.ticketania.com
queue.ticketania.com
queue.ticketania.com
queue.ticketania.com
sslcertificate2.queue-it.net
queue.ticketania.com
queue.ticketania.com
queue.ticketania.com
sslcertificate2.queue-it.net
queue.ticketania.com
ticketania.com
sslcertificate2.queue-it.net
queue.ticketania.com
sslcertificate2.queue-it.net
reazus.ticketania.com
queue.ticketania.com
ticketania.com
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
queue.ticketania.com
queue.ticketania.com
ticketania.com
queue.ticketania.com
mosa2balablabla.ticketania.com
mosa2balablabla.ticketania.com
queue.ticketania.com
sslcertificate2.queue-it.net
queue.ticketania.com
queue.ticketania.com
sslcertificate2.queue-it.net
queue.ticketania.com
queue.ticketania.com
sslcertificate2.queue-it.net
queue.ticketania.com
sslcertificate2.queue-it.net
queue.ticketania.com
sslcertificate2.queue-it.net
queue.ticketania.com
queue.ticketania.com
mpro-queue.ticketania.com
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
queue.ticketania.com
mpro-queue.ticketania.com
queue.ticketania.com
sslcertificate2.queue-it.net
queue.ticketania.com
queue.ticketania.com
queue.ticketania.com
queue.ticketania.com
queue.ticketania.com
queue.ticketania.com

Certificate

The complete raw certificate details for queue.ticketania.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreKQBbMdU0Lf30BFFyBm
6QRIIl6v6YyyOck3rNZ77Elms3SPNA5HvRHWPQkGnOcSeKqreMIttz4rxTuLm/EW
mkZ7zfeQc1fJuxFlxGjukikntj+31s1dJJOaqU2/bH8td0tezzRrrPfVjZDK0wPz
+EYynlL114xBmjnUgE0YXRYUiqAGkU/ju7q0PHTazidKEOYd1swIEjf2LvJv2Cw4
MeUxPaIz165xZvqHAdvUf8cIxXXV5j0aIkH1I4QDqjrseTSlbTOLrKyefe6IR7S3
6Huf9jRWZEcR0S+CMhUcN16Qm5R6pA0nzT+WD15vbkSvl3zNDYf2ELBtb8g21TjY
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14368435420343754898882184590220871310
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'queue.ticketania.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21950948934705558108805704636278309876220738533444582250906649717325626879500999902231217646075854798809224862277208278335017827617776344369231880773715216144247997860348693626566529271026834953356594231804707062110649830859090223804695043488560858295241854124997528265471961698576674573239802777929422142789301866144115381678146755875107421196309955164786650362521840507471429061106213197250860394234367527906911774281491087327263887335704012462978766366788894746849769379090637549704371331782622777292122660773534343902466733635898861538579612959460358912909197284953573568014585066487191072738348912224705657231489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24a1b31a677a412ea58bcbfd17e5a7b81684c02b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (615 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.ticketania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.ticketarena.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrypotterqueue.travelcircus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dragoiscoming.tieks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.scandlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.hakuapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storequeue.wizards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.aspiraconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.fanfares.cathaypacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.sky.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.fairphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.uhuu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.hlg.uhuu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-queue.hakuapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.amctheatres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q.axs.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiting.seaworldparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attente.feq2019.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wait.thepga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.ticketfairy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.atgtickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'line.universe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wait.loud-project.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.tkt.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wait.fenty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.accesofan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.hkairportshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.stage.amctheatres.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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