qbe-bastion-uat.effisoft.cloud

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:4d:8e:28:0d:24:6b:e6:25:1a:b5:9d:7b:29:6a:f2 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=qbe-bastion-uat.effisoft.cloud

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:4d:8e:28:0d:24:6b:e6:25:1a:b5:9d:7b:29:6a:f2
Serial Number (int): 19011882074453559051645916878440327922
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6d:0d:e0:6c:90:0f:92:73:81:81:c3:49:74:f6:51:ef:96:0a:30:ad
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): b7:66:34:9d:f8:c0:d9:1e:ae:12:71:93:dc:d0:b8:d1:c8:f6:c6:e1
Fingerprint (sha256): 25:cc:72:cf:b9:c7:02:2a:7a:45:11:ac:c6:18:ef:d4:9e:82:5d:8a:96:df:c8:5e:f9:a1:75:b4:80:41:45:39

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate qbe-bastion-uat.effisoft.cloud

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qbe-bastion-uat.effisoft.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qbe-bastion-uat.effisoft.cloud

Other certificates including the domain name effisoft.cloud

(limited to 100 certificates)
wst-wxl-ppd.effisoft.cloud
qbe-bo-dev.effisoft.cloud
enc-wxl-prd.effisoft.cloud
qbe-wxl-uat.effisoft.cloud
ars-aco-prd.effisoft.cloud
efi-tst.effisoft.cloud
ci-pxl-915a.effisoft.cloud
qbe-bastion-tbm.effisoft.cloud
deb2-qlf2.effisoft.cloud
pen-tst.effisoft.cloud
sta-wxl-tst.effisoft.cloud
ics-wxl-ada.effisoft.cloud
qbebusinessobjectsdev.effisoft.cloud
its-jasper-tst916.effisoft.cloud
wxl1.effisoft.cloud
ics-aco-tst.effisoft.cloud
aco.effisoft.cloud
qlf-dev.effisoft.cloud
ci-pxl-919s.effisoft.cloud
qbe-bastion-tbl.effisoft.cloud
kbc-wxl-tst.effisoft.cloud
ics-wxl-ada.effisoft.cloud
qbe-wxl-ppd.effisoft.cloud
qbe-uat.effisoft.cloud
ics-aco-tst.effisoft.cloud
test3.effisoft.cloud
deb3-qlf3.effisoft.cloud
ras-wxl-tst.effisoft.cloud
ics-wxl-tst.effisoft.cloud
qbe-bastion-tbl.effisoft.cloud
ics-jasper-tst.effisoft.cloud
advens-sec.effisoft.cloud
qbe-bo-tbl.effisoft.cloud
sra-tst.effisoft.cloud
qbe-wxl-tbl.effisoft.cloud
jbg-dev.effisoft.cloud
efi-tst.effisoft.cloud
ics-wxl-ada.effisoft.cloud
qbebusinessobjectsdev.effisoft.cloud
debian-qualif.effisoft.cloud
sso-auth-tst.effisoft.cloud
qbe-wxl-tbl.effisoft.cloud
boe-bo-tst.effisoft.cloud
qbe-wxl-tbl.effisoft.cloud
qbe-bastion-tbl.effisoft.cloud
ics-wxl-ada.effisoft.cloud
jb-dev.effisoft.cloud
qbe-wxl-ubn.effisoft.cloud
jbg-dev.effisoft.cloud
test3.effisoft.cloud
ics-aco-tst.effisoft.cloud
kbc-bastion-prd.effisoft.cloud
wst-bo-prd.effisoft.cloud
qbe-tbl.effisoft.cloud
qbe-wxl-tbl.effisoft.cloud
ics-aco-tst.effisoft.cloud
qbe-bo-uat.effisoft.cloud
qbe-bo-tbl.effisoft.cloud
ars-aco-prd.effisoft.cloud
wst-wxl-ppd.effisoft.cloud
efi-dev.effisoft.cloud
qbe-env-status.effisoft.cloud
wst-wxl-dev.effisoft.cloud
ics-aco-tst.effisoft.cloud
eflb-wxl-dev.effisoft.cloud
mbo-tst.effisoft.cloud
sra-tst.effisoft.cloud
qbe-bo-dev.effisoft.cloud
ci-pxl-917a.effisoft.cloud
ci-pxl-915a.effisoft.cloud
ics-wxl-ada.effisoft.cloud
mkm-tst.effisoft.cloud
ics-jasper-tst.effisoft.cloud
qbe-wxl-dbn.effisoft.cloud
qbe-bastion-uat.effisoft.cloud
ics-wxl-ada.effisoft.cloud
jb-dev.effisoft.cloud
demo1-tst.effisoft.cloud
efi-dev.effisoft.cloud
wxl2.effisoft.cloud
qa2.effisoft.cloud
jb-dev.effisoft.cloud
qbe-auth-tbl.effisoft.cloud
qbe-wxl-tbm.effisoft.cloud
qbe-bo-ppd.effisoft.cloud
for-wxl-prd.effisoft.cloud
qbe-auth-tbl.effisoft.cloud
ics-wxl-rpa.effisoft.cloud
qbe-wxl-tbl.effisoft.cloud
ics-aco-tst.effisoft.cloud
ics-jasper-tst.effisoft.cloud
ci-jasper-pxl-915a.effisoft.cloud
mfp-aco-tbl.effisoft.cloud
jenkins-legacy.effisoft.cloud
sso-wxl-tst.effisoft.cloud
qbe-bastion-dbl.effisoft.cloud
qbe-wxl-dev.effisoft.cloud
qbe-dev.effisoft.cloud
debian-qualif.effisoft.cloud
enc-auth-prd.effisoft.cloud

Certificate

The complete raw certificate details for qbe-bastion-uat.effisoft.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEkjCCA3qgAwIBAgIQDk2OKA0ka+YlGrWdeylq8jANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA3MjkwMDAwMDBaFw0yMDA4Mjkx
MjAwMDBaMCkxJzAlBgNVBAMTHnFiZS1iYXN0aW9uLXVhdC5lZmZpc29mdC5jbG91
ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJDsX028YPZea05KfHRA
rNyI3Ft0FijMjcdiyIWtKPtrKBxHOMJbVPWC7/EH1+7Loky7o2Y8fjbMq98eH4tE
XM3MlgrXOH/f5dE0WkyQ8/N9tte6IQH2oyaUtzTY7rkbAA3QQeRDCUK38AuNN5oX
RltlQeez9bjcgcgeerSd36rt33+NlCyC/9LTtudGZVBstIpVWI9CRCCUcxpB5Mku
AtTlrO4GR45yA9TLzgZ0RV6esEXSdFiyscURrMT5jDOuZWlftNMqZn2ZmQjGv2Jx
IfOEJguFDIUw2o0R+lL6WydP3hxIdeu61/Xpd5C0U+qL/IMGnodNiAulNreDWWIq
rmsCAwEAAaOCAZcwggGTMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3Q
MB0GA1UdDgQWBBRtDeBskA+Sc4GBw0l09lHvlgowrTApBgNVHREEIjAggh5xYmUt
YmFzdGlvbi11YXQuZWZmaXNvZnQuY2xvdWQwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRw
Oi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkw
FzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEF
BQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUF
BzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQw
DAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAJBr76TJCsaszTIhFukWi6LmeLH6Kyp9SQeEtXMzbuzP2JZdOBREWIhc+
/gZHKjWa7CuNo4smFMqFfJNBccjeaIKT3yWlf3WpcZ/OdAC9g8qEcSpYLOd9QctY
bFPPK9rC0tIWulMRaPD5t0zJDaBw5SU9IczHwXjUqQxtd9fJNry52kq87wwJZ9no
1SjVK1dDt0jaBsHG6X10suMCQzHNvniiKyTgEdPBuZl4m0QdQs9FkFl72tyIdN2x
Vn3VDnoAFv0wBBSPnG9OFJo0fBZVwUZRplW1qAgaz4XS5NEeTg0y0k9MkI4oq576
Ey7r8IK9hYKU3+AxYj6pPLyjfo0Qjg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOxfTbxg9l5rTkp8dECs
3IjcW3QWKMyNx2LIha0o+2soHEc4wltU9YLv8QfX7suiTLujZjx+Nsyr3x4fi0Rc
zcyWCtc4f9/l0TRaTJDz832217ohAfajJpS3NNjuuRsADdBB5EMJQrfwC403mhdG
W2VB57P1uNyByB56tJ3fqu3ff42ULIL/0tO250ZlUGy0ilVYj0JEIJRzGkHkyS4C
1OWs7gZHjnID1MvOBnRFXp6wRdJ0WLKxxRGsxPmMM65laV+00ypmfZmZCMa/YnEh
84QmC4UMhTDajRH6UvpbJ0/eHEh167rX9el3kLRT6ov8gwaeh02IC6U2t4NZYiqu
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19011882074453559051645916878440327922
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qbe-bastion-uat.effisoft.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18294875430566233888144622824889648906013658770017571780029253076902197848767241331198859104423779983595787074634473808339173425164229129857837294725742732689731028389428801441031915143918695836480846785464197387075363677863926427225933806123009066056447607755997498260359140437852308105871773367098410766350460706138745558377775088706422432156173981079153283686143472904722822008091378715306503651682823787765449901722589120067664250586273051484652935197329275584127532696862716380850277548578367347873186153888315265575527969626214788325019087398989967817742814977284092598669831196709287960579804718423483431431787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6d0de06c900f92738181c34974f651ef960a30ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qbe-bastion-uat.effisoft.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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