oa.mathematica-mpr.com

- Mathematica Policy Research, Inc -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 01:ff:ff:8f:09:6e:d1:d7:56:87:a2:de:ad:0e:44:5c was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Mathematica Policy Research, Inc

Organization: Mathematica Policy Research, Inc
Organization unit: ITS
State / Province: New Jersey
Locality: Princeton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:ff:ff:8f:09:6e:d1:d7:56:87:a2:de:ad:0e:44:5c
Serial Number (int): 2658447041706805509367207767625843804
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 60:15:7f:23:39:8d:b3:6b:53:1c:67:12:21:e8:03:8a:45:ac:76:ab
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): cf:a5:45:29:9d:d9:2d:5b:e5:19:a9:36:b3:b9:fd:c9:28:0b:c8:ec
Fingerprint (sha256): 23:91:23:e9:0b:7c:80:f6:a9:06:20:44:bc:f6:57:6c:b4:16:6d:55:e7:6c:05:08:61:a9:77:77:12:af:7c:25

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate oa.mathematica-mpr.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oa.mathematica-mpr.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oa.mathematica-mpr.com
autodiscover.mathematica-mpr.com
eas.mathematica-mpr.com
em2.mathematica-mpr.com
owa.mathematica-mpr.com

Other certificates including the domain name mathematica-mpr.com

(limited to 100 certificates)
hostext3a.mathematica-mpr.com
sastg.mathematica-mpr.com
oa.mathematica-mpr.com
snapet-pilots.mathematica-mpr.com
reu.mathematica-mpr.com
rpgcse.mathematica-mpr.com
dha.mathematica-mpr.com
nj3mrae1.mathematica-mpr.com
macbis-dq.mathematica-mpr.com
BRIGHT.mathematica-mpr.com
meet.mathematica-mpr.com
CPCplus.mathematica-mpr.com
pss.mathematica-mpr.com
pactinterviews.mathematica-mpr.com
mprftp.mathematica-mpr.com
bsfws.mathematica-mpr.com
et1.mathematica-mpr.com
CPCplus.mathematica-mpr.com
nj3mrae1.mathematica-mpr.com
macbis-dq.mathematica-mpr.com
RSAField.mathematica-mpr.com
MPRFTP.mathematica-mpr.com
fx1.mathematica-mpr.com
careers.mathematica-mpr.com
SOC.mathematica-mpr.com
wwc-wics.mathematica-mpr.com
oa.mathematica-mpr.com
fx1.mathematica-mpr.com
swfi.mathematica-mpr.com
DCM2.MATHEMATICA-MPR.COM
FXStg-CoachingTANF.mathematica-mpr.com
ESHC.mathematica-mpr.com
pmsestat.mathematica-mpr.com
DOLBI-2.mathematica-mpr.com
nj3wbxea1-e.mathematica-mpr.com
hssuccess.mathematica-mpr.com
MGLS17.mathematica-mpr.com
PrimaryCareFirst.mathematica-mpr.com
snmcs.mathematica-mpr.com
WIOASTUDY.MATHEMATICA-MPR.COM
support.mathematica-mpr.com
rpgcse.mathematica-mpr.com
ALERT.MATHEMATICA-MPR.COM
mihopesurvey3.mathematica-mpr.com
vpn.mathematica-mpr.com
em2.mathematica-mpr.com
bxfreedomfundeval.mathematica-mpr.com
et1.mathematica-mpr.com
sinclairtaaccct.mathematica-mpr.com
rtpeval.mathematica-mpr.com
ptraining.mathematica-mpr.com
meet.mathematica-mpr.com
definitionsandpolicies.mathematica-mpr.com
hostmpr2.mathematica-mpr.com
hvee.mathematica-mpr.com
edechfield.mathematica-mpr.com
dha.mathematica-mpr.com
titlei-ecld.mathematica-mpr.com
CPCPLUS.MATHEMATICA-MPR.COM
DI.MATHEMATICA-MPR.COM
rur.mathematica-mpr.com
smartfield.mathematica-mpr.com
ECeCQM.mathematica-mpr.com
tqdstudy.mathematica-mpr.com
bi.mathematica-mpr.com
snmcs.mathematica-mpr.com
SinclairTAACCCT.mathematica-mpr.com
rel-ma.mathematica-mpr.com
BI.mathematica-mpr.com
WIOASTUDY.MATHEMATICA-MPR.COM
reo.mathematica-mpr.com
MGLS17.mathematica-mpr.com
Alert.mathematica-mpr.com
DPS.mathematica-mpr.com
TAA-BILT.MATHEMATICA-MPR.COM
hostm141.mathematica-mpr.com
yarh.mathematica-mpr.com
mc-crs.mathematica-mpr.com
hciar2fx.mathematica-mpr.com
nj3mrae1.mathematica-mpr.com
bls1.mathematica-mpr.com
workforcesystemstrategies.mathematica-mpr.com
pss.mathematica-mpr.com
bls1.mathematica-mpr.com
REO.mathematica-mpr.com
simr.mathematica-mpr.com
YouthChalleNGe.mathematica-mpr.com
ebhvpeers.mathematica-mpr.com
sdppclin3.mathematica-mpr.com
cit1.mathematica-mpr.com
websurvey.mathematica-mpr.com
stop-nextgen.mathematica-mpr.com
di.mathematica-mpr.com
oa.mathematica-mpr.com
CPCPlus.mathematica-mpr.com
CMST4B.mathematica-mpr.com
rel-ma.mathematica-mpr.com
chipra-qde.mathematica-mpr.com
snapoutreach.mathematica-mpr.com
hostm142.mathematica-mpr.com

Certificate

The complete raw certificate details for oa.mathematica-mpr.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzdlbPkgeGJNtq95iZV1
HVVFyepOBayQmLCo++Q9dac/zyzFxDB2fGuEhzb57SDL8tnd+nYP2+WQ3ej1/103
6rN6ePxqjGVXHrhHBTBUwYQRKB8RgVts3FaRcSIkTVt3EuSnnBJGwVyO/7VlWhxl
75+cGodBg9VEDcoYBn5G2Qyfk67hlN+UgJXEIj1m6PmFVf0H0/17umlJ3/I9L4xG
+uF7HbhNZEO7bqt1yhh3ZWzuIu9BoWrL0+GlJt0K92zy2xrBmWJokYF3SN8c+SzW
gR1oYteWXvbN6xybWGIzCa/0j/RklMat6r9Ae4QQJpY5EmMI8AFJRN6BhIGcsQ3X
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2658447041706805509367207767625843804
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Princeton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mathematica Policy Research, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ITS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oa.mathematica-mpr.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25653692789509246890081945830886607151383180576838023292225170539837141603813581189299609138971615236061159503681667507386523798941265711736386539862620218892762768896453106721426982523222905909311093853852458217041310594901167277731093359978348364611129592397495363436739122504307884166568486038714089108863782765597597968665493183964149320563298598476544092310438988644302479700273430770808705597602398369905010591515455830144918696569084291474062591936002178441772743715200912735456226740437417081510582098347537030962783726658273914011021273738635677629423752760648877539009786811317245880037670222775696059389789
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							60157f23398db36b531c671221e8038a45ac76ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (136 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oa.mathematica-mpr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.mathematica-mpr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eas.mathematica-mpr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'em2.mathematica-mpr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.mathematica-mpr.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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