persistent.app.qa.aws.dotdash.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:a1:85:67:de:13:0b:19:4b:59:59:d6:ba:3f:e9:c8 was issued on by Amazon.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=persistent.app.qa.aws.dotdash.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:a1:85:67:de:13:0b:19:4b:59:59:d6:ba:3f:e9:c8
Serial Number (int): 19447857524919648293780532096988604872
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 82:af:24:10:94:f8:2f:10:4e:2b:8a:03:5f:29:f1:8f:ba:01:a9:16
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 5d:d0:10:71:e3:47:16:b6:9b:95:8f:97:5b:f7:d6:58:ef:47:6c:33
Fingerprint (sha256): 23:82:f2:8f:97:f5:bd:e0:0f:50:2b:5a:89:bd:77:cc:ba:e9:f9:79:ac:d8:51:44:76:ac:7b:cf:61:68:b9:ca

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate persistent.app.qa.aws.dotdash.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for persistent.app.qa.aws.dotdash.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

persistent.app.qa.aws.dotdash.com
*.app.qa.aws.dotdash.com
*.qa.aws.dotdash.com
qa.aws.dotdash.com
*.dotdash.com
dotdash.com
*.external1.persistent.app.qa.aws.dotdash.com
*.external2.persistent.app.qa.aws.dotdash.com
*.external3.persistent.app.qa.aws.dotdash.com
*.external4.persistent.app.qa.aws.dotdash.com
*.external5.persistent.app.qa.aws.dotdash.com
*.external6.persistent.app.qa.aws.dotdash.com
*.external7.persistent.app.qa.aws.dotdash.com
*.internal1.persistent.app.qa.aws.dotdash.com
*.internal2.persistent.app.qa.aws.dotdash.com
*.internal3.persistent.app.qa.aws.dotdash.com
*.internal4.persistent.app.qa.aws.dotdash.com
*.internal5.persistent.app.qa.aws.dotdash.com
*.internal6.persistent.app.qa.aws.dotdash.com
*.internal7.persistent.app.qa.aws.dotdash.com

Other certificates including the domain name dotdash.com

(limited to 100 certificates)
continual.app.qa.aws.dotdash.com
disposable.app.qa.aws.dotdash.com
pe.app.qa.aws.dotdash.com
dotdash.map.fastly.net
*.dotdash.com
*.test.aws.dotdash.com
continual.app.qa.aws.dotdash.com
pe.app.qa.aws.dotdash.com
a-ue1.dotdash.com
disposable.app.qa.aws.dotdash.com
dotdash.map.fastly.net
dotdash.map.fastly.net
*.dotdash.com
about.com
dotdash.map.fastly.net
pe-adhoc-2.app.qa.aws.dotdash.com
local.dotdash.com
pe-batch.app.qa.aws.dotdash.com
link.dotdash.com
continual.app.prod.aws.dotdash.com
*.greenhouse.dotdash.com
local.dotdash.com
disposable.app.qa.aws.dotdash.com
continual.app.qa.aws.dotdash.com
a-ue1.dotdash.com
local.dotdash.com
hackerone-quarantine.app.qa.aws.dotdash.com
a-uw2.dotdash.com
*.about.com
*.dotdash.com
*.about.com
techblog.dotdash.com
*.about.com
local.dotdash.com
techblog.dotdash.com
*.about.com
*.ext1.use1.dotdash.com
*.dotdash.com
dotdash.map.fastly.net
pe-batch.app.qa.aws.dotdash.com
groceryserver-qa.dotdash.com
persistent.app.qa.aws.dotdash.com
a-ue1.dotdash.com
disposable.app.qa.aws.dotdash.com
dotdash.com
continual.app.qa.aws.dotdash.com
*.about.com
local.dotdash.com
link.dotdash.com
continual.app.qa.aws.dotdash.com
control.app.prod.aws.dotdash.com
continual.app.prod.aws.dotdash.com
central-control.app.prod.aws.dotdash.com
persistent.app.qa.aws.dotdash.com
local.dotdash.com
dotdash.map.fastly.net
*.about.com
dotdash.map.fastly.net
persistent.app.qa.aws.dotdash.com
link.dotdash.com
persistent.app.qa.aws.dotdash.com
disposable.app.qa.aws.dotdash.com
continual.app.prod.aws.dotdash.com
persistent.app.qa.aws.dotdash.com
*.ext1.usw2.dotdash.com
continual.app.prod.aws.dotdash.com
a-uw2.dotdash.com
continual.app.qa.aws.dotdash.com
persistent.app.qa.aws.dotdash.com
a-ue1.dotdash.com
continual.app.qa.aws.dotdash.com
persistent.app.qa.aws.dotdash.com
central-control.app.prod.aws.dotdash.com
pe.app.qa.aws.dotdash.com
persistent.app.qa.aws.dotdash.com
pe-adhoc-4.app.qa.aws.dotdash.com
local.dotdash.com
pe.app.qa.aws.dotdash.com
pe-batch.app.qa.aws.dotdash.com
local.dotdash.com
dotdash.map.fastly.net
qa.aws.dotdash.com
local.dotdash.com
dotdash.com
*.ops.k8s.use1.dotdash.com
*.about.com
a-ue1.dotdash.com
persistent.app.qa.aws.dotdash.com
*.qa.aws.about.com
dotdash.map.fastly.net
continual.app.prod.aws.dotdash.com
dotdash.map.fastly.net
control.app.qa.aws.dotdash.com
continual.app.prod.aws.dotdash.com
link.dotdash.com
*.qa.aws.about.com
persistent.app.qa.aws.dotdash.com
*.about.com
dotdash.map.fastly.net
disposable.app.qa.aws.dotdash.com

Certificate

The complete raw certificate details for persistent.app.qa.aws.dotdash.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SJlxxW8Q4uZg0rh7fJk
HB6zwvRGccSgjKuWIzGU/XE2QfEhEE4AaM/hFQr6bDzKxkCwDeTpZx1Ro31GTtIs
UT/Xe9Dv1xtbCTFv4MpqHDdX4GVuxXpPYRgTWiWclh1mcnWBTyhEdBVnGOX/qT+j
hKw5dbyAc19nI4VyJj7sssSk2US0V20owrJXA5bhWf+hzyrkqviKNb1/uZcjwlsh
7KVjlRsd9lZHeurRJdrfd9Q/V8aEcNY2xPqiFXnqv9IQHhwQctiMF7swMl1RwkTs
kFAwe0T3hcn0xSofD6nInHVhkEYhT3LUP3eXlYapY5qMl16ecmeuEttqsPbGUpC1
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19447857524919648293780532096988604872
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'persistent.app.qa.aws.dotdash.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28420580690844196016743607103217944803092075535648870208929786947627695867742064097966893562003235804696413870694275331751753469018690675238307088992498418019696947225485775577486254044742616820351406765952790336345103376652754867536539530175259454645122356391950159710093699408111303490106759880020359420167473544030686425952833882408164738801240288197450737462586724070220450822511259025829835141524768011799913467194236599218231498935062602391615811727443783360413320393663627230560838503233003532778135616922122312613648801360100651610788289084706326041911483698635009529188999046609099558562501745152001391506891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							82af241094f82f104e2b8a035f29f18fba01a916
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (793 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external1.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external2.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external3.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external4.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external5.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external6.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external7.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal1.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal2.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal3.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal4.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal5.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal6.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal7.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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