transitanalyst-nightly.uat.dukc.net
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 07:10:dc:fe:a5:45:b6:5f:a9:41:89:b0:ec:13:25:47 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=transitanalyst-nightly.uat.dukc.net
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:10:dc:fe:a5:45:b6:5f:a9:41:89:b0:ec:13:25:47Serial Number (int): 9392155025446354080430250208020079943
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: b3:e6:92:f7:12:0f:51:26:07:8d:1f:e5:04:b7:db:81:00:1f:6d:ca
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): da:80:4c:f2:e7:4d:0b:cc:3f:12:fe:c3:ba:4f:a8:50:35:09:d9:b6
Fingerprint (sha256): 23:67:8e:98:c2:36:e7:65:bb:5e:70:c0:03:07:fe:e3:b9:eb:04:dc:52:de:cd:8b:b8:04:ab:cd:72:ea:0d:e2
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate transitanalyst-nightly.uat.dukc.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for transitanalyst-nightly.uat.dukc.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
transitanalyst-nightly.uat.dukc.net
Other certificates including the domain name dukc.net
(limited to 100 certificates)
rmq.sandpitunstable.dukc.net
msdukc2.sandpit.dukc.net
services.production.dukc.net
msdukc-melbourne1.uat.dukc.net
dukc.net
auth.sandpit.dukc.net
dukc.net
auth.sandpit.dukc.net
dukc.net
nagios.uat.dukc.net
services.support.dukc.net
msdukc2.test.dukc.net
dds.test.dukc.net
auth.sandpit.dukc.net
www.dukc.net
nagios.sandpit.dukc.net
dds.support.dukc.net
sandpit.dukc.net
auth.test.dukc.net
nagios.sandpit.dukc.net
adaptacast2.sandpit.dukc.net
msdukc2.sandpitdev.dukc.net
dukc.net
services.dukc.net
transitanalyst-nightly.uat.dukc.net
api.production.dukc.net
rmq.uat.dukc.net
dds.production.dukc.net
melbourne.dukc.com
dds.sandpit.dukc.net
nagios.sandpit.dukc.net
dukc.net
adaptacast.test.dukc.net
dukc.net
rmq.test.dukc.net
auth.dukc.net
auth.sandpit.dukc.net
dukc.net
dukc.net
sandpitdev.dukc.net
msdukc1.uat.dukc.net
serviceviewer.support.dukc.net
dds.dukc.net
nagios.uat.dukc.net
dukc.net
centralais.dukc.net
api.sandpit.dukc.net
dukc.net
dukc.net
centralrmq.dukc.net
msdukc2.dukc.net
dds.production.dukc.net
sandpit.dukc.net
appservices.test.dukc.net
services.sandpit.dukc.net
adaptacast.support.dukc.net
test.dukc.net
appservices.sandpit.dukc.net
dukc.net
nagios.dukc.net
adaptacast.dukc.net
adaptacast2.production.dukc.net
dds.sandpitunstable.dukc.net
dukc.net
dukc.net
rmq.test.dukc.net
dukc.net
sandpitunstable.dukc.net
api.dukc.net
serviceviewer.production.dukc.net
melbourne.dukc.com
msdukc-melbourne1.sandpitdev.dukc.net
adaptacast1.production.dukc.net
msdukc2.sandpit.dukc.net
strat1.sandpitdev.dukc.net
centralrmq.dukc.net
dds.test.dukc.net
dds.dukc.net
api.sandpit.dukc.net
nagios.production.dukc.net
adaptacast.production.dukc.net
nagios.production.dukc.net
ais.sandpit.dukc.net
appservices.production.dukc.net
uat.dukc.net
api.sandpit.dukc.net
ais.uat.dukc.net
rmq.sandpit.dukc.net
adaptacast.sandpit.dukc.net
dds.sandpitdev.dukc.net
nagios.dukc.net
rmq.support.dukc.net
ais.dukc.net
msdukc1.production.dukc.net
*.dukc.net
rmq.sandpit.dukc.net
api.sandpitdev.dukc.net
rmq.production.dukc.net
msdukc1.test.dukc.net
ais.sandpit.dukc.net
msdukc2.sandpit.dukc.net
services.production.dukc.net
msdukc-melbourne1.uat.dukc.net
dukc.net
auth.sandpit.dukc.net
dukc.net
auth.sandpit.dukc.net
dukc.net
nagios.uat.dukc.net
services.support.dukc.net
msdukc2.test.dukc.net
dds.test.dukc.net
auth.sandpit.dukc.net
www.dukc.net
nagios.sandpit.dukc.net
dds.support.dukc.net
sandpit.dukc.net
auth.test.dukc.net
nagios.sandpit.dukc.net
adaptacast2.sandpit.dukc.net
msdukc2.sandpitdev.dukc.net
dukc.net
services.dukc.net
transitanalyst-nightly.uat.dukc.net
api.production.dukc.net
rmq.uat.dukc.net
dds.production.dukc.net
melbourne.dukc.com
dds.sandpit.dukc.net
nagios.sandpit.dukc.net
dukc.net
adaptacast.test.dukc.net
dukc.net
rmq.test.dukc.net
auth.dukc.net
auth.sandpit.dukc.net
dukc.net
dukc.net
sandpitdev.dukc.net
msdukc1.uat.dukc.net
serviceviewer.support.dukc.net
dds.dukc.net
nagios.uat.dukc.net
dukc.net
centralais.dukc.net
api.sandpit.dukc.net
dukc.net
dukc.net
centralrmq.dukc.net
msdukc2.dukc.net
dds.production.dukc.net
sandpit.dukc.net
appservices.test.dukc.net
services.sandpit.dukc.net
adaptacast.support.dukc.net
test.dukc.net
appservices.sandpit.dukc.net
dukc.net
nagios.dukc.net
adaptacast.dukc.net
adaptacast2.production.dukc.net
dds.sandpitunstable.dukc.net
dukc.net
dukc.net
rmq.test.dukc.net
dukc.net
sandpitunstable.dukc.net
api.dukc.net
serviceviewer.production.dukc.net
melbourne.dukc.com
msdukc-melbourne1.sandpitdev.dukc.net
adaptacast1.production.dukc.net
msdukc2.sandpit.dukc.net
strat1.sandpitdev.dukc.net
centralrmq.dukc.net
dds.test.dukc.net
dds.dukc.net
api.sandpit.dukc.net
nagios.production.dukc.net
adaptacast.production.dukc.net
nagios.production.dukc.net
ais.sandpit.dukc.net
appservices.production.dukc.net
uat.dukc.net
api.sandpit.dukc.net
ais.uat.dukc.net
rmq.sandpit.dukc.net
adaptacast.sandpit.dukc.net
dds.sandpitdev.dukc.net
nagios.dukc.net
rmq.support.dukc.net
ais.dukc.net
msdukc1.production.dukc.net
*.dukc.net
rmq.sandpit.dukc.net
api.sandpitdev.dukc.net
rmq.production.dukc.net
msdukc1.test.dukc.net
ais.sandpit.dukc.net
Certificate
The complete raw certificate details for transitanalyst-nightly.uat.dukc.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEhTCCA22gAwIBAgIQBxDc/qVFtl+pQYmw7BMlRzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIyMTIwMTAwMDAwMFoXDTIzMTIzMDIzNTk1OVowLjEs MCoGA1UEAxMjdHJhbnNpdGFuYWx5c3QtbmlnaHRseS51YXQuZHVrYy5uZXQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjZb8we8c1689qQFYwoLL9bqJk e/i/LkXD+Iz0L9ktO9Cqrtf/7IDseX9OWc/OPtS2OJ2o/B1RgngLBLFpB9A/18EE Jb+NAf4wsXEt1I2vYQsc4YWrHD+fkK8cQ+U1kuk2aEdNj0+3b/cmGSUB3QNzg23h EXHa/da1zQjVqehcXAinRYyqj1M/6P+lnIAPd/dpQBwxvd29yClslCb/8iOgdeFC GID36sCV/429d/4NFuxWWjEoT6M3WcUMCnNyP9uAVWNzu685OrgW9MqtbS9p6/yj tZEGvFIkZNdWsOloO+QoYV9Tdd93e5H7Hg/cgl6EuNEJw9ZJRHXUAZTMy8S/AgMB AAGjggGPMIIBizAfBgNVHSMEGDAWgBSBuA5jiokSGOX6OztQlZ/m5ZAThTAdBgNV HQ4EFgQUs+aS9xIPUSYHjR/lBLfbgQAfbcowLgYDVR0RBCcwJYIjdHJhbnNpdGFu YWx5c3QtbmlnaHRseS51YXQuZHVrYy5uZXQwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRw Oi8vY3JsLnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jcmwwEwYDVR0gBAww CjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8v b2NzcC5yMm0wMS5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9j cnQucjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAxLmNlcjAMBgNVHRMBAf8EAjAA MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCTAiprGjJa b14Rye0hedxWzgYEmBoU7OHbZk7mQbENrsYMhYxdQtM+Ra2OsHlyuDuTR3xXXsJY Db6klx1nnFTQ7S4Tikeo45Ndab7MyiK8poV5c1rAptqxUP+8jwRqHztM5tsKNgSW tAm9TW6oIOhkuBa0cjjvgN/PYhxpI59Uywr/09VeGLYoLz0Fhnbh0A5hEJHcb7Y+ +x7d6PleJZwrAyir81k0K3BcL2jt0VNk2lU9qc4tO7tHuljIzHfRv3/FObsWjsi3 rlMM+ZORDNyjb0B6/9JayT9MuxNW3aVt8yRNIlmsb4nWt2HFUYjtZWifJX//Zngs ietw6VDQL15C -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2W/MHvHNevPakBWMKCy /W6iZHv4vy5Fw/iM9C/ZLTvQqq7X/+yA7Hl/TlnPzj7UtjidqPwdUYJ4CwSxaQfQ P9fBBCW/jQH+MLFxLdSNr2ELHOGFqxw/n5CvHEPlNZLpNmhHTY9Pt2/3JhklAd0D c4Nt4RFx2v3Wtc0I1anoXFwIp0WMqo9TP+j/pZyAD3f3aUAcMb3dvcgpbJQm//Ij oHXhQhiA9+rAlf+NvXf+DRbsVloxKE+jN1nFDApzcj/bgFVjc7uvOTq4FvTKrW0v aev8o7WRBrxSJGTXVrDpaDvkKGFfU3Xfd3uR+x4P3IJehLjRCcPWSUR11AGUzMvE vwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9392155025446354080430250208020079943 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-01 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-30 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'transitanalyst-nightly.uat.dukc.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20627016943072902406299818032844207201835264325728483372212546718909372584900730753292961586460515091269061215696395615175800027602121461231936416463431094576359832011427688270483354802834481789753237413801981625153304449991448608392608801657300513439120131111997060138121011198263004092267824877299146526713284655187485045085461681349260904796076828696288478248447811882269133634745011083012563706630986584967507400509369968280062722951286369854174122479676102243545258771991349154981326642015120694066548390783981455823366764142527891873481719600588912112421707509308624407249582653373230450444184113646791771800767 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b3e692f7120f5126078d1fe504b7db81001f6dca . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transitanalyst-nightly.uat.dukc.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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