*.nats.tokyo
Issued by JPRS Domain Validation Authority - G2
About this certificate
This digital certificate with serial number 35:47:d5:30:96:69:ee:f7 was issued on by Japan Registry Services Co., Ltd..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)
Certificate Subject
CN=*.nats.tokyo
Japan Registry Services Co., Ltd.
Organization:
Japan Registry Services Co., Ltd.
Country:
JP
This certificate has expire since
Certificate Details
Serial Number (hex): 35:47:d5:30:96:69:ee:f7Serial Number (int): 3839271612015308535
Serial Number lenght: 62 bits, 8 octets
SubjectKeyId: fa:e2:c9:03:b6:f6:91:eb:92:e8:9c:14:ff:e4:72:4d:f9:0d:be:15
AuthorityKeyId: bb:3a:ea:57:62:78:0c:32:ad:1f:b2:7b:f6:1d:06:22:96:e1:ab:f0
Fingerprint (sha1): 09:16:98:95:92:0a:67:e2:92:c4:51:0b:63:68:2c:6d:1b:c7:32:ba
Fingerprint (sha256): 2a:b1:88:2c:e2:77:44:d6:df:fe:09:99:5a:31:ad:86:44:2d:31:c4:14:04:69:9e:6a:05:a8:bc:7e:76:de:96
Revocation information
OCSP Server: http://dv.g2.ocsp.pubcert.jprs.jpCRL Distribution Point: http://repo.pubcert.jprs.jp/sppca/jprs/dvca_g2/fullcrl.crl
Check the revocation status for certificate *.nats.tokyo
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.nats.tokyo
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.nats.tokyo
nats.tokyo
nats.tokyo
Other certificates including the domain name nats.tokyo
(limited to 100 certificates)
katou-t.nats.tokyo
mitoyo.nats.tokyo
mitoyo.nats.tokyo
f-eiken.nats.tokyo
green-grace.nats.tokyo
3-r2.nats.tokyo
chita-kougyo.nats.tokyo
m-tsuda.nats.tokyo
itsuki-group.nats.tokyo
s-and-g.nats.tokyo
*.nats.tokyo
shinada.nats.tokyo
*.nats.tokyo
*.nats.tokyo
kyushu-ad.nats.tokyo
orwak.nats.tokyo
harukarainbow.nats.tokyo
tk-union.nats.tokyo
yusho-co.nats.tokyo
maruhishi.nats.tokyo
hai-f.nats.tokyo
*.nats.tokyo
*.nats.tokyo
daiyu-kaitai.nats.tokyo
harukarainbow.nats.tokyo
sawadatekkin.nats.tokyo
hirano-tire.nats.tokyo
yusho-co.nats.tokyo
usami-kenkou.nats.tokyo
109sai.nats.tokyo
*.nats.tokyo
hayashida-d-s.nats.tokyo
lim-eiya.nats.tokyo
kamakuranozomikai.nats.tokyo
daiyu-kaitai.nats.tokyo
harukarainbow.nats.tokyo
*.nats.tokyo
sawadatekkin.nats.tokyo
boh-chubu.nats.tokyo
kyushu-ad.nats.tokyo
orwak.nats.tokyo
nankai-road.nats.tokyo
car-life.nats.tokyo
miyoshikai.nats.tokyo
s-and-g.nats.tokyo
ichiki-setsubi.nats.tokyo
keick.nats.tokyo
pianoservice2.nats.tokyo
3-r2.nats.tokyo
act-sp.nats.tokyo
activeplan.nats.tokyo
f-eiken.nats.tokyo
maedago.nats.tokyo
hanakawah.nats.tokyo
green-grace.nats.tokyo
straight.nats.tokyo
*.nats.tokyo
systems.nats.tokyo
miyoshikai.nats.tokyo
sf092.nats.tokyo
sf092.nats.tokyo
boh-chubu.nats.tokyo
green-grace.nats.tokyo
*.nats.tokyo
towa-k.nats.tokyo
towa-k.nats.tokyo
nanseikikou.nats.tokyo
kaza-design.nats.tokyo
kashiwa-b.nats.tokyo
ando-s.nats.tokyo
zhiservice.nats.tokyo
eco-runner.nats.tokyo
kyushu-ad.nats.tokyo
kaza-design.nats.tokyo
kawasuke.nats.tokyo
shinada.nats.tokyo
*.nats.tokyo
yutaka-rr.nats.tokyo
*.nats.tokyo
lim-eiya.nats.tokyo
ast.nats.tokyo
links-c.nats.tokyo
hayashida-d-s.nats.tokyo
nankai-road.nats.tokyo
life-e.nats.tokyo
mitoyo.nats.tokyo
mitoyo.nats.tokyo
f-eiken.nats.tokyo
green-grace.nats.tokyo
3-r2.nats.tokyo
chita-kougyo.nats.tokyo
m-tsuda.nats.tokyo
itsuki-group.nats.tokyo
s-and-g.nats.tokyo
*.nats.tokyo
shinada.nats.tokyo
*.nats.tokyo
*.nats.tokyo
kyushu-ad.nats.tokyo
orwak.nats.tokyo
harukarainbow.nats.tokyo
tk-union.nats.tokyo
yusho-co.nats.tokyo
maruhishi.nats.tokyo
hai-f.nats.tokyo
*.nats.tokyo
*.nats.tokyo
daiyu-kaitai.nats.tokyo
harukarainbow.nats.tokyo
sawadatekkin.nats.tokyo
hirano-tire.nats.tokyo
yusho-co.nats.tokyo
usami-kenkou.nats.tokyo
109sai.nats.tokyo
*.nats.tokyo
hayashida-d-s.nats.tokyo
lim-eiya.nats.tokyo
kamakuranozomikai.nats.tokyo
daiyu-kaitai.nats.tokyo
harukarainbow.nats.tokyo
*.nats.tokyo
sawadatekkin.nats.tokyo
boh-chubu.nats.tokyo
kyushu-ad.nats.tokyo
orwak.nats.tokyo
nankai-road.nats.tokyo
car-life.nats.tokyo
miyoshikai.nats.tokyo
s-and-g.nats.tokyo
ichiki-setsubi.nats.tokyo
keick.nats.tokyo
pianoservice2.nats.tokyo
3-r2.nats.tokyo
act-sp.nats.tokyo
activeplan.nats.tokyo
f-eiken.nats.tokyo
maedago.nats.tokyo
hanakawah.nats.tokyo
green-grace.nats.tokyo
straight.nats.tokyo
*.nats.tokyo
systems.nats.tokyo
miyoshikai.nats.tokyo
sf092.nats.tokyo
sf092.nats.tokyo
boh-chubu.nats.tokyo
green-grace.nats.tokyo
*.nats.tokyo
towa-k.nats.tokyo
towa-k.nats.tokyo
nanseikikou.nats.tokyo
kaza-design.nats.tokyo
kashiwa-b.nats.tokyo
ando-s.nats.tokyo
zhiservice.nats.tokyo
eco-runner.nats.tokyo
kyushu-ad.nats.tokyo
kaza-design.nats.tokyo
kawasuke.nats.tokyo
shinada.nats.tokyo
*.nats.tokyo
yutaka-rr.nats.tokyo
*.nats.tokyo
lim-eiya.nats.tokyo
ast.nats.tokyo
links-c.nats.tokyo
hayashida-d-s.nats.tokyo
nankai-road.nats.tokyo
life-e.nats.tokyo
Certificate
The complete raw certificate details for *.nats.tokyo in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEjjCCA3agAwIBAgIINUfVMJZp7vcwDQYJKoZIhvcNAQELBQAwaTELMAkGA1UE BhMCSlAxKjAoBgNVBAoTIUphcGFuIFJlZ2lzdHJ5IFNlcnZpY2VzIENvLiwgTHRk LjEuMCwGA1UEAxMlSlBSUyBEb21haW4gVmFsaWRhdGlvbiBBdXRob3JpdHkgLSBH MjAeFw0xODA3MDUwNjMxNThaFw0yMDA3MzExNDU5NTlaMBcxFTATBgNVBAMMDCou bmF0cy50b2t5bzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANIfW4Kf foQXOW7UNVXSVOvoGlo8tH0EokhWMEBEw0r1UzgNt8xLpHGruVi/jpOrv23MJ/Uu BQ/T4iVF3ZIbVLxbDRW43k0E1TGhbvyfPTrNGwDop/OVpk17qW5j4GkABdcXlVB4 Jyh0vFXQeNyn3FpyXRxCpnpCzAheT30Fo6DkhT3fUCtnjpUBEYP1xZKabBU7m1Ua E8XNdeR/zcktjhUOSFwFPD75ZjAqKSwihIUpfVOc5u59g9B74HlQsj34ky2fnKl+ H38rwKKD8JFd/vCsufHyWIOTHwx2pIOpv89RaboXE14sMcCvNV7JJaMii2a1DESH 4cXJg84e1JWHyGECAwEAAaOCAYowggGGMB8GA1UdIwQYMBaAFLs66ldieAwyrR+y e/YdBiKW4avwMD0GCCsGAQUFBwEBBDEwLzAtBggrBgEFBQcwAYYhaHR0cDovL2R2 LmcyLm9jc3AucHViY2VydC5qcHJzLmpwMCMGA1UdEQQcMBqCDCoubmF0cy50b2t5 b4IKbmF0cy50b2t5bzBZBgNVHSAEUjBQMEQGCiqDCIybG26BUAMwNjA0BggrBgEF BQcCARYoaHR0cHM6Ly9qcHJzLmpwL3B1YmNlcnQvaW5mby9yZXBvc2l0b3J5LzAI BgZngQwBAgEwEwYDVR0lBAwwCgYIKwYBBQUHAwEwSwYDVR0fBEQwQjBAoD6gPIY6 aHR0cDovL3JlcG8ucHViY2VydC5qcHJzLmpwL3NwcGNhL2pwcnMvZHZjYV9nMi9m dWxsY3JsLmNybDAdBgNVHQ4EFgQU+uLJA7b2keuS6JwU/+RyTfkNvhUwDgYDVR0P AQH/BAQDAgWgMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDOsD/g1BOik08A7uLFoZgLJfi86ccrpxnpEmTEo9E5GpHXcZJeIJjdWxmA2ftR LH8yqX2997NhOBCeuMqxf8tXrpNPsAghRKdzPitRZDdykrqGoehXn0Lxk2iBY8FM 38ivlJHrfTNQtHwjG7/HPKTOIyaucA59j61qXNNKiI4A5j8kuieN7WAhE0+acyKN ABypljbBEapm//0R+/E8MJNdc6az9A3Buh4pk1Yfnlr++qlh+OI3oRj95Xq0pfac HcrOf2x8QfFX4+L+IpvPZmymlYv/3RF9nZIXJFHkrlPO0mhBZ/Vb01POayXxtUAl sMAaqo4M4ri9JOa1O6Xofi/u -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0h9bgp9+hBc5btQ1VdJU 6+gaWjy0fQSiSFYwQETDSvVTOA23zEukcau5WL+Ok6u/bcwn9S4FD9PiJUXdkhtU vFsNFbjeTQTVMaFu/J89Os0bAOin85WmTXupbmPgaQAF1xeVUHgnKHS8VdB43Kfc WnJdHEKmekLMCF5PfQWjoOSFPd9QK2eOlQERg/XFkppsFTubVRoTxc115H/NyS2O FQ5IXAU8PvlmMCopLCKEhSl9U5zm7n2D0HvgeVCyPfiTLZ+cqX4ffyvAooPwkV3+ 8Ky58fJYg5MfDHakg6m/z1FpuhcTXiwxwK81XskloyKLZrUMRIfhxcmDzh7UlYfI YQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3839271612015308535 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Japan Registry Services Co., Ltd.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JPRS Domain Validation Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-05 06:31:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-31 14:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nats.tokyo' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525506983646488100816020208433890428187306761123036791940965661330628579671638839061473301232246795247510762046610186284114336592744532990219155900177369260907747054913461473461416357383497051134953785285764109468544491079062981507349240051175951412442420928376697205200001045174693565403173365912380970037434777763919424087046416281257952661283212471947834621161781624521738157662506128718625865729345121456581595905991514520726547655517012909748048510631187355846677871680534061646951173856190167200653649066673818793866463912223450269966061164910825911234454140058467651187974978894586554814526281046441169766497 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bb3aea5762780c32ad1fb27bf61d062296e1abf0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://dv.g2.ocsp.pubcert.jprs.jp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nats.tokyo' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nats.tokyo' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.110.208.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://jprs.jp/pubcert/info/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo.pubcert.jprs.jp/sppca/jprs/dvca_g2/fullcrl.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fae2c903b6f691eb92e89c14ffe4724df90dbe15 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00ceb03fe0d413a2934f00eee2c5a1980b25f8bce9c72ba719e91264c4a3d1391a91d771925e2098dd5b1980d9fb512c7f32a97dbdf7b36138109eb8cab17fcb57ae934fb0082144a7733e2b5164377292ba86a1e8579f42f193688163c14cdfc8af9491eb7d3350b47c231bbfc73ca4ce2326ae700e7d8fad6a5cd34a888e00e63f24ba278ded6021134f9a73228d001ca99636c111aa66fffd11fbf13c30935d73a6b3f40dc1ba1e2993561f9e5afefaa961f8e237a118fde57ab4a5f69c1dcace7f6c7c41f157e3e2fe229bcf666ca6958bffdd117d9d92172451e4ae53ced2684167f55bd353ce6b25f1b54025b0c01aaa8e0ce2b8bd24e6b53ba5e87e2fee