www.95559.com.cn

- Bank Of Communications Co.,Ltd. -

Issued by Secure Site Pro Extended Validation CA G2

About this certificate

This digital certificate with serial number 04:df:37:8f:ad:b2:6a:f0:bd:5b:06:46:ad:32:cc:7d was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bank Of Communications Co.,Ltd.

Company registration number: 9131000010000595XD
Organization: Bank Of Communications Co.,Ltd.
State / Province: 上海市
Country: CN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:df:37:8f:ad:b2:6a:f0:bd:5b:06:46:ad:32:cc:7d
Serial Number (int): 6475921098504970941145491049985264765
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: bb:df:58:d1:0f:90:9c:09:33:4b:1c:a9:b4:39:af:c6:2b:65:3d:d8
AuthorityKeyId: b1:95:14:a8:d5:ba:74:88:71:cd:96:8b:17:35:88:df:f0:c1:5d:f3

Fingerprint (sha1): 75:13:d5:21:c6:b0:4d:7b:29:ab:c1:09:73:6b:d9:27:87:42:f2:ce
Fingerprint (sha256): 2a:74:03:8c:fc:fb:12:48:32:f9:c7:f3:ef:18:d9:af:ac:1d:96:ce:61:ae:39:20:a3:28:53:ef:f0:5d:09:43

Issuing Certificate URL: http://crl.digicert-cn.com/SecureSiteProExtendedValidationCAG2.crt

Revocation information

OCSP Server: http://ocsp.dcocsp.cn
CRL Distribution Point: http://crl3.digicert.com/SecureSiteProExtendedValidationCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/SecureSiteProExtendedValidationCAG2.crl

Check the revocation status for certificate www.95559.com.cn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.95559.com.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.95559.com.cn
95559.com.cn

Other certificates including the domain name 95559.com.cn

(limited to 100 certificates)
*.95559.com.cn
mbanktest.95559.com.cn
ebank.95559.com.cn
mbanktest.95559.com.cn
jyty.95559.com.cn
pbank.95559.com.cn
ebs.95559.com.cn
ebank.95559.com.cn
wap.95559.com.cn
mobile.95559.com.cn
pbank.95559.com.cn
pbank.95559.com.cn
offshore.95559.com.cn
mobile.95559.com.cn
healthybocom-gelue.95559.com.cn
www.95559.com.cn
sign.95559.com.cn
apply.95559.com.cn
pay.95559.com.cn
ebank.95559.com.cn
mbanktest.95559.com.cn
www.95559.com.cn
jytybank.95559.com.cn
apply.95559.com.cn
pay.95559.com.cn
jrtoc.95559.com.cn
pbank.95559.com.cn
pay.95559.com.cn
apply.95559.com.cn
webbot.95559.com.cn
apply.95559.com.cn
ebs.95559.com.cn
ebs.95559.com.cn
enterprise.95559.com.cn
pay.95559.com.cn
ebs.95559.com.cn
ebs.95559.com.cn
download1.95559.com.cn
personal.95559.com.cn
wap.95559.com.cn
pbank.95559.com.cn
mapi.95559.com.cn
mbanktest.95559.com.cn
wap.95559.com.cn
wap.95559.com.cn
ebs.95559.com.cn
arcs.95559.com.cn
sign.95559.com.cn
ebs.95559.com.cn
ebank.95559.com.cn
corporation.95559.com.cn
apply.95559.com.cn
pay.95559.com.cn
wap.95559.com.cn
wap.95559.com.cn
apply.95559.com.cn
apply.95559.com.cn
mbanktest.95559.com.cn
www.95559.com.cn
pbank.95559.com.cn
pay.95559.com.cn
offshore.95559.com.cn
mapi.95559.com.cn
cbapp.95559.com.cn
ebank.95559.com.cn
wap.95559.com.cn
ebank.95559.com.cn
beste.95559.com.cn
offshore.95559.com.cn
ebank.95559.com.cn
wap.95559.com.cn
mobile.95559.com.cn
ebs.95559.com.cn
pay.95559.com.cn
www.95559.com.cn
pay.95559.com.cn
pbank.95559.com.cn
merchant.95559.com.cn
mobile.95559.com.cn
www.95559.com.cn
www.95559.com.cn
ebank.95559.com.cn
apply.95559.com.cn
mbank.95559.com.cn
mapi.95559.com.cn
pay.95559.com.cn
ebank.95559.com.cn
mapi.95559.com.cn
mobile.95559.com.cn
ebs.95559.com.cn
open.95559.com.cn
wap.95559.com.cn
ebs.95559.com.cn
ebs.95559.com.cn
pbank.95559.com.cn
mbanktest.95559.com.cn
mapi.95559.com.cn
sandbox.95559.com.cn
arcs.95559.com.cn
*.test.95559.com.cn

Certificate

The complete raw certificate details for www.95559.com.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMqZSCkN8mVZQh4DOttz
+Aq5qENNnIaMVRlA1Uwbh0BYapOokUvtfDvn0of/EptmF98HMu7GzFu5eqGW+u1I
fYkBpeP8kyFmggu1nlURw2f2o97YMYyqA9nr/8B8kmAHnez007mhuNG/kll7hulH
ZOrgFVgWieT94T9FBe3gXXfs9mzjmnSlgyNUvsfivdUl/nE3WnZrviJDtKRVeb9Z
w4iwi62xx2MwRDyZXwnswljnMDhE86eK6psEm5wG06GRlTPW4PzU/jc6nBF5JJvh
OC++1DojSR1Cc/TQVOrIOkS65V1P9hFroHRXU3ICSH0H9/0k3va4Z20IJOxepq/2
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6475921098504970941145491049985264765
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Secure Site Pro Extended Validation CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '上海市'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '9131000010000595XD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '上海市'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bank Of Communications Co.,Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.95559.com.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25852519383832014150506539458327647749086456811665268124014817576712889192673743761435224668929221188974836958505327905141973611250586119256770133625284884206414318024384093085036308878111806442612160674925760385949643734550316270196531473298779964914699675661825553708246496779276921491590078026440715192149636486930338175370690943756951696395982482729729600211731656614235928147274240788636695548458486617460258633630578246277574532142720123368362630597171867144491807924986431724631243443918172153626273549017300418225694818853246395704286327983681073460748359703295352991515847054421650449867118032876749875836633
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b19514a8d5ba748871cd968b173588dff0c15df3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bbdf58d10f909c09334b1ca9b439afc62b653dd8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.95559.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '95559.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/SecureSiteProExtendedValidationCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/SecureSiteProExtendedValidationCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.dcocsp.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert-cn.com/SecureSiteProExtendedValidationCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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