Purchase.firefly.jstor.org

- ITHAKA HARBORS, INC. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 02:1f:c4:32:5d:c1:0f:66:e5:b5:f8:96:31:15:31:a4 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ITHAKA HARBORS, INC.

Organization: ITHAKA HARBORS, INC.
Organization unit: IT
State / Province: New Jersey
Locality: Princeton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:1f:c4:32:5d:c1:0f:66:e5:b5:f8:96:31:15:31:a4
Serial Number (int): 2823396536890354173100295559813869988
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 28:64:70:06:9c:3e:8c:cb:7e:17:0a:72:2e:14:18:14:dc:45:af:98
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 3d:72:b0:1e:08:c4:c4:d8:93:33:b7:d5:0b:76:62:98:4c:eb:4a:8e
Fingerprint (sha256): 22:a3:0f:88:09:07:71:9a:4f:bf:29:c9:8a:df:38:54:f5:0d:c9:5f:e0:13:e6:65:b4:6b:e7:8a:ec:94:bf:f7

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate Purchase.firefly.jstor.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Purchase.firefly.jstor.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

Purchase.firefly.jstor.org

Other certificates including the domain name jstor.org

(limited to 100 certificates)
dns-vetting1-jeffg-noah.map.fastly.net
5698311486963712-fe2.pantheonsite.io
5662329727352832-fe1.pantheonsite.io
5642779036221440-fe2.pantheonsite.io
5666083260334080-fe3.pantheonsite.io
5642779036221440-fe2.pantheonsite.io
dns-vetting1.map.fastly.net
pubexchange.jstor.org
5698311486963712-fe2.pantheonsite.io
jira.jstor.org
dns-vetting1-jeffg-noah.map.fastly.net
about-mdev.jstor.org
www.jstor.org
guides.jstor.org
5662329727352832-fe1.pantheonsite.io
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
*.a.ssl.fastly.net
dns-vetting1i.map.fastly.net
www.jstor.org
*.a.ssl.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
5642779036221440-fe2.pantheonsite.io
5698311486963712-fe2.pantheonsite.io
5662329727352832-fe1.pantheonsite.io
dns-vetting1-jeffg-noah.map.fastly.net
5642779036221440-fe2.pantheonsite.io
5642779036221440-fe2.pantheonsite.io
support.jstor.org
5662329727352832-fe1.pantheonsite.io
www.jstor.com
dns-vetting1-jeffg-noah.map.fastly.net
shibboleth2sp.jstor.org
5662329727352832-fe1.pantheonsite.io
5698311486963712-fe2.pantheonsite.io
support.jstor.org
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
support.jstor.org
daily.jstor.org
5698311486963712-fe2.pantheonsite.io
*.a.ssl.fastly.net
5662329727352832-fe1.pantheonsite.io
dns-vetting1-jeffg-noah.map.fastly.net
*.a.ssl.fastly.net
purchase.jstor.org
5698311486963712-fe2.pantheonsite.io
dns-vetting1-jeffg-noah.map.fastly.net
5642779036221440-fe2.pantheonsite.io
5666083260334080-fe3.pantheonsite.io
5662329727352832-fe1.pantheonsite.io
dns-vetting1i.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
5662329727352832-fe1.pantheonsite.io
dns-vetting1i.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
5662329727352832-fe1.pantheonsite.io
dns-vetting1-jeffg-noah.map.fastly.net
5662329727352832-fe1.pantheonsite.io
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
about.jstor.org
a.ssl.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
*.a.ssl.fastly.net
*.a.ssl.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
5662329727352832-fe1.pantheonsite.io
*.a.ssl.fastly.net
5662329727352832-fe1.pantheonsite.io
jstor.org
5662329727352832-fe1.pantheonsite.io
dns-vetting1.map.fastly.net
5662329727352832-fe1.pantheonsite.io
5662329727352832-fe1.pantheonsite.io
5662329727352832-fe1.pantheonsite.io
5642779036221440-fe2.pantheonsite.io
5662329727352832-fe1.pantheonsite.io
pep.jstor.org
dns-vetting1-jeffg-noah.map.fastly.net
5662329727352832-fe1.pantheonsite.io
about.jstor.org
*.a.ssl.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
5698311486963712-fe2.pantheonsite.io
5698311486963712-fe2.pantheonsite.io
dns-vetting1-jeffg-noah.map.fastly.net
5698311486963712-fe2.pantheonsite.io
5662329727352832-fe1.pantheonsite.io
5666083260334080-fe3.pantheonsite.io
5642779036221440-fe2.pantheonsite.io
*.a.ssl.fastly.net
5698311486963712-fe2.pantheonsite.io
5666083260334080-fe3.pantheonsite.io
5698311486963712-fe2.pantheonsite.io
Purchase.firefly.jstor.org
dns-vetting1i.map.fastly.net
5642779036221440-fe2.pantheonsite.io
5662329727352832-fe1.pantheonsite.io

Certificate

The complete raw certificate details for Purchase.firefly.jstor.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWFGJ/COEep2Plz6qVWi
lHJzjU7kX3+5dEuFb45cJAYR6gy3Kvm1sedwnYzQwb0PcsnQx94WgglyMh6+N5Y7
cbdHXD5v8351l2ZF77z0CAyc0tNl26KxU9Kpy0H2hlWEhMWGsNZmcZfaOiUG2z1r
TI9uu1S88vShmnINU0/qbkXuwr2CW/qjO2vwiN9Bdo1eFAFrlRai/s2jWTWI1ogp
ax2I4AMVioD6nX0jtnCpevEEmklExwCSE1AgSr3HWjAncrKAacdzvEUq8rjdovMo
K9MYFmkicZuCTpA1VmledOZ3nwHvuIyez6oWoVtkSXgPOD9Eza05S8u+K8orJvL4
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2823396536890354173100295559813869988
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Princeton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ITHAKA HARBORS, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Purchase.firefly.jstor.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21887194379447493366835753320589828832110609089348496835195295217460565228143299692539700801023450931798524117877049722228512034047602860415294572266267625203391606867570275886351058490596011219941741967510909433240241854059328048617536224989873647008946712354643167832063908057013278310223877891483770276064054745258190551387987399775352779723274892923767171917187642700038194119003570055465865777193497548140653262025598371072438563918540003016883698848614277525218455790178220665971417663281348806536067948521191363219460687566538640785796268480056357663405815719969168385807464351392393460923213498533835305056291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							286470069c3e8ccb7e170a722e141814dc45af98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Purchase.firefly.jstor.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0070a1f4fda729fefd4ad1ffe9be75b8f5eadebfe9140d552b6d599a32607fe36a9d6602963f3b8f84377a82c94d2fde6976cc8af1205284d08ff2b8aa67e74153d7a786126422345137f029dd326915c0578ad2ee2d845be9b1bd81ef7ca5241fb07baf1c0dbbe425fe82730ad24daa5cdc5cce2720c72b3ad2f4f8f926b23440211ae3630ddadea1ff1719e5cff23c43490f0691e68566848d83da3c536952149054f06785201587322f5c6b65ab4caee070279549cc47cc9c8c40945007cda2d876d79db1c84e2f9e55ec54f26189fc78c281abbd908b69dde26ff2c2138ecc8a2452122b10283ef4f5b989a3b581c6c9aa0019c14943954c7d1b22f2d3190d