lighthousetech.io

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 03:d4:e3:90:aa:13:d7:cb:1c:95:c9:6e:db:3e:45:bc was issued on by Amazon.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lighthousetech.io

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:d4:e3:90:aa:13:d7:cb:1c:95:c9:6e:db:3e:45:bc
Serial Number (int): 5093066489836002374954713355852334524
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 16:3e:fb:48:fc:cb:6f:b0:7b:e0:9e:98:04:d3:53:7f:44:3e:c7:82
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 9c:a3:3c:21:01:7d:fd:34:2f:0c:80:57:21:e3:2c:45:13:21:7d:78
Fingerprint (sha256): 24:f6:f0:c3:da:94:7c:85:6c:1f:25:cd:eb:16:04:8f:ef:09:2e:bc:46:1d:7f:36:33:26:50:6a:1f:55:79:51

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate lighthousetech.io

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lighthousetech.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lighthousetech.io
*.lighthousetech.io
*.dev1.lighthousetech.io
*.qa.lighthousetech.io
*.prod.lighthousetech.io
*.dev2.lighthousetech.io
*.stg.lighthousetech.io
*.demo.lighthousetech.io
*.dev.lighthousetech.io

Other certificates including the domain name lighthousetech.io

(limited to 100 certificates)
jobs.247bop.com
portal.canagig.com
careers.skilltechgroup.co.za
portal.canagig.com
careers.bahrainbus.bh
portal.canagig.com
jobs.tradeswomenaus.com
careers.cubepayment.com
jobs.braincert.com
portal.canagig.com
portal.canagig.com
portal.canagig.com
jobs.studioqatar.com
hiring.innovorg.com
jobs.studioqatar.com
portal.canagig.com
portal.canagig.com
jobs.studioqatar.com
lighthousetech.io
www.lighthousetech.io
portal.canagig.com
careers.ingran.co.za
jobs.studioqatar.com
jobs.247bop.com
jobs.lighthousetech.io
portal.canagig.com
lighthousetech.io
jobs.everdyn.com
lighthousetech.io
careers.cubepayment.com
portal.canagig.com
portal.canagig.com
portal.canagig.com
careers.bahrainbus.bh
careers.cubepayment.com
portal.canagig.com
careers.tbol.com
jobs.studioqatar.com
www.lighthousetech.io
portal.canagig.com
jobs.studioqatar.com
jobs.247bop.com
careers.perituza.com
jobs.oneczar.wilcofinance.com
portal.canagig.com
careers.perituza.com
careers.skilltechgroup.co.za
jobs.braincert.com
jobs.studioqatar.com
careers.tbol.com
recruit.siriab.se
portal.canagig.com
careers.kncting.com
jobs.studioqatar.com
hiring.innovorg.com
jobs.studioqatar.com
jobs.247bop.com
jobs.tradeswomenaus.com
jobs.studioqatar.com
careers.ingran.co.za
jobs.studioqatar.com
talent.netinx.in
portal.canagig.com
careers.ingran.co.za
talent.netinx.in
portal.canagig.com
recruit.siriab.se
careers.ingran.co.za
jobs.tradeswomenaus.com
jobs.vysystems.com
careers.bc-eg.com
portal.canagig.com
portal.canagig.com
jobs.studioqatar.com
hiring.innovorg.com
careers.kncting.com
careers.skilltechgroup.co.za
recruit.numericys.ca
jobs.everdyn.com
jobs.oneczar.wilcofinance.com
portal.canagig.com
careers.bahrainbus.bh
portal.canagig.com
jobs.rigt.com
jobs.studioqatar.com
portal.canagig.com
jobs.everdyn.com
portal.canagig.com
portal.canagig.com
jobs.studioqatar.com
jobs.studioqatar.com
portal.canagig.com
jobs.studioqatar.com
careers.perituza.com
careers.skilltechgroup.co.za
jobs.studioqatar.com
jobs.vysystems.com
jobs.studioqatar.com
portal.canagig.com
portal.canagig.com

Certificate

The complete raw certificate details for lighthousetech.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIQA9TjkKoT18sclclu2z5FvDANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTI0MDYwNDAwMDAwMFoXDTI1MDcwMjIzNTk1OVowHDEa
MBgGA1UEAxMRbGlnaHRob3VzZXRlY2guaW8wggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgDNbjCEiCK6VRf8Xj2E6sYLEILEf9Fimf6nsarPxBZxGNdjOe
I+psc0nOHaHS2tfOelNCLdBudNpziZRSNFLXE6hIsxMN6HThZjeAKnonhZEHXTFs
YZrhAcNqRRq7Hvro77u/BWQyP8rmf0yq1Nc7EZjZ9VcnFG5ZktitX9RWX6RnySBf
AzGCM/vSt3V8PzAQGb24NMUUy8rmeAGYbGhElGEMKc9Tru7veojRdWZAJC5Le/b4
w9HPOiCAoIf0tbzAxzqYWKjp13mrw67U/kr8GL/zJ1Du0zdSZvNCP2FBqHJiI692
gYSNV/oO/l7z70NgntYtD+VOFARUoRgxy1/PAgMBAAGjggJHMIICQzAfBgNVHSME
GDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQUFj77SPzLb7B74J6Y
BNNTf0Q+x4IwgeUGA1UdEQSB3TCB2oIRbGlnaHRob3VzZXRlY2guaW+CEyoubGln
aHRob3VzZXRlY2guaW+CGCouZGV2MS5saWdodGhvdXNldGVjaC5pb4IWKi5xYS5s
aWdodGhvdXNldGVjaC5pb4IYKi5wcm9kLmxpZ2h0aG91c2V0ZWNoLmlvghgqLmRl
djIubGlnaHRob3VzZXRlY2guaW+CFyouc3RnLmxpZ2h0aG91c2V0ZWNoLmlvghgq
LmRlbW8ubGlnaHRob3VzZXRlY2guaW+CFyouZGV2LmxpZ2h0aG91c2V0ZWNoLmlv
MBMGA1UdIAQMMAowCAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2Ny
bC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJtMDMuY3JsMHUGCCsGAQUFBwEBBGkw
ZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDMuYW1hem9udHJ1c3QuY29t
MDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAzLmFtYXpvbnRydXN0LmNvbS9y
Mm0wMy5jZXIwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkq
hkiG9w0BAQsFAAOCAQEAT/CyDotedJ0m1SjRg0z+ISTkaZoO40965CiomXRxfd0D
89gYdZVPR3re/XOHXU742/whSXFGRMc3rQFnPNm+2tlH/mmiIuI7KkOD5GxaK9IS
fN/vZk8v3czgoILbNtP++Yo+Rf5VJN/WYxWqaA50sWfE4O8nwG3Ip/j3kLlX6QFq
IpXbL2cdi7/7x+cajOblsGsR7yRpaJOYphK78oJ+C5HxtJUCrkHxt2KfQ59BKGDz
LqFx4Qu5Ed2Z7fKH7os8k/DcfMZUHtRtuLuz9Ubmm6JzmBBIWauY5KastFQG8yJY
rUVcI7q/5p1jdNki7bc2zFR6V7YviBxIxmUnNWP0yw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAzW4whIgiulUX/F49hO
rGCxCCxH/RYpn+p7Gqz8QWcRjXYzniPqbHNJzh2h0trXznpTQi3QbnTac4mUUjRS
1xOoSLMTDeh04WY3gCp6J4WRB10xbGGa4QHDakUaux766O+7vwVkMj/K5n9MqtTX
OxGY2fVXJxRuWZLYrV/UVl+kZ8kgXwMxgjP70rd1fD8wEBm9uDTFFMvK5ngBmGxo
RJRhDCnPU67u73qI0XVmQCQuS3v2+MPRzzoggKCH9LW8wMc6mFio6dd5q8Ou1P5K
/Bi/8ydQ7tM3UmbzQj9hQahyYiOvdoGEjVf6Dv5e8+9DYJ7WLQ/lThQEVKEYMctf
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5093066489836002374954713355852334524
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lighthousetech.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20204460139539258432776690942946512473128312968884976611778757062396172686663909084423151897441892212346237517963939776663594169187090677762899904937222303162089954339185021578113754278076025191973230266562497382190620264258767346943914202376636489462824777346050741357623976819925190941927398860867247183336223355972907103113027192522694385387131648937498560606562834981452564473923399740020993213831060204063170609184775710974915294411489034003370431414470024663221089792631812027587555558089692567007211602704396602386467748713346278290383070646803386063106986324730459690501901053669261649385885967236950588612559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							163efb48fccb6fb07be09e9804d3537f443ec782
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (221 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lighthousetech.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lighthousetech.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev1.lighthousetech.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.lighthousetech.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.lighthousetech.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev2.lighthousetech.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.lighthousetech.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demo.lighthousetech.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.lighthousetech.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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