production.montalpina.sales.diarz.net
Issued by Amazon
About this certificate
This digital certificate with serial number 0c:5d:d5:87:b8:99:97:d9:9b:97:d6:04:7d:58:cc:fb was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=production.montalpina.sales.diarz.net
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:5d:d5:87:b8:99:97:d9:9b:97:d6:04:7d:58:cc:fbSerial Number (int): 16437950463441171224807470107561872635
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 3c:d2:bd:f4:64:99:b3:f5:1f:61:07:60:6e:96:48:ad:a1:4e:7a:84
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 64:fd:78:f3:c9:a3:a4:b8:63:fb:52:64:e5:39:fb:7f:eb:3f:32:da
Fingerprint (sha256): 2a:f3:25:67:6a:a4:81:a2:b4:d9:41:6a:45:28:b4:e2:f9:73:f5:67:9c:0f:50:a2:c0:97:11:73:b6:a1:f1:cc
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate production.montalpina.sales.diarz.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for production.montalpina.sales.diarz.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
production.montalpina.sales.diarz.net
*.production.montalpina.sales.diarz.net
*.production.montalpina.sales.diarz.net
Other certificates including the domain name diarz.net
(limited to 100 certificates)
skom.rms.brand.diarz.net
fs-demo.sms.brand.diarz.net
wecker.rcommerce.net
meiseleder.at
wuetschner-shop.de
industrietechnik24.rms.brand.diarz.net
unimatic.rms.brand.diarz.net
krinner.rms.brand.diarz.net
geyer.rms.brand.diarz.net
production.sandvik.sales.diarz.net
production.infraserv.sales.diarz.net
pspneumatik.rms.brand.diarz.net
production.precitool.sales.diarz.net
ackrutat.de
riegler.shop
production.mb.sales.diarz.net
production.montalpina.sales.diarz.net
production.kfw.sales.diarz.net
mls-safety-shop.de
toologic-webshop.de
production.pchpoints.sales.diarz.net
kl-arbeitsschutz.de
webshop.schmitter-hydraulik.de
wecker.rms.brand.diarz.net
doeringshoff.de
muehlberger-shop.de
riegler.shop
tsm.rms.brand.diarz.net
approval.dia.procure.diarz.net
production.mls.sales.diarz.net
kw-webshop.de
wille.rms.brand.diarz.net
pch-portal.com
approval.dia.sales.diarz.net
ksa-shop.de
muehlberger-shop.de
kfw-webshop.de
nordparts.sms.brand.diarz.net
altmann-industrietechnik.shop
fey.rms.brand.diarz.net
pwk-shop.de
fecht.sms.brand.diarz.net
kfw-webshop.de
interlink.diatool.diarz.net
mls-safety-shop.de
ackrutat.de
groll.rms.brand.diarz.net
production.kw.sales.diarz.net
rolfwebershop.de
bosch.sms.brand.diarz.net
kl-arbeitsschutz.de
moesch.rms.brand.diarz.net
demo.rms.brand.diarz.net
bng.sms.brand.diarz.net
erp.diatool.diarz.net
toologic-webshop.de
trg.rms.brand.diarz.net
ps-hydraulik.sms.brand.diarz.net
rittmeier.rms.brand.diarz.net
montalpina-shop.com
montalpina-shop.com
doeringshoff.de
production.schmitter.sales.diarz.net
wilde-hydraulik.sms.brand.diarz.net
neuendorf-shop.de
dzbamberg.rms.brand.diarz.net
hanselmann.rms.brand.diarz.net
pwk-shop.de
production.kl.sales.diarz.net
kl-webshop.de
fs-demo.sms.brand.diarz.net
wecker.rcommerce.net
meiseleder.at
wuetschner-shop.de
industrietechnik24.rms.brand.diarz.net
unimatic.rms.brand.diarz.net
krinner.rms.brand.diarz.net
geyer.rms.brand.diarz.net
production.sandvik.sales.diarz.net
production.infraserv.sales.diarz.net
pspneumatik.rms.brand.diarz.net
production.precitool.sales.diarz.net
ackrutat.de
riegler.shop
production.mb.sales.diarz.net
production.montalpina.sales.diarz.net
production.kfw.sales.diarz.net
mls-safety-shop.de
toologic-webshop.de
production.pchpoints.sales.diarz.net
kl-arbeitsschutz.de
webshop.schmitter-hydraulik.de
wecker.rms.brand.diarz.net
doeringshoff.de
muehlberger-shop.de
riegler.shop
tsm.rms.brand.diarz.net
approval.dia.procure.diarz.net
production.mls.sales.diarz.net
kw-webshop.de
wille.rms.brand.diarz.net
pch-portal.com
approval.dia.sales.diarz.net
ksa-shop.de
muehlberger-shop.de
kfw-webshop.de
nordparts.sms.brand.diarz.net
altmann-industrietechnik.shop
fey.rms.brand.diarz.net
pwk-shop.de
fecht.sms.brand.diarz.net
kfw-webshop.de
interlink.diatool.diarz.net
mls-safety-shop.de
ackrutat.de
groll.rms.brand.diarz.net
production.kw.sales.diarz.net
rolfwebershop.de
bosch.sms.brand.diarz.net
kl-arbeitsschutz.de
moesch.rms.brand.diarz.net
demo.rms.brand.diarz.net
bng.sms.brand.diarz.net
erp.diatool.diarz.net
toologic-webshop.de
trg.rms.brand.diarz.net
ps-hydraulik.sms.brand.diarz.net
rittmeier.rms.brand.diarz.net
montalpina-shop.com
montalpina-shop.com
doeringshoff.de
production.schmitter.sales.diarz.net
wilde-hydraulik.sms.brand.diarz.net
neuendorf-shop.de
dzbamberg.rms.brand.diarz.net
hanselmann.rms.brand.diarz.net
pwk-shop.de
production.kl.sales.diarz.net
kl-webshop.de
Certificate
The complete raw certificate details for production.montalpina.sales.diarz.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEvjCCA6agAwIBAgIQDF3Vh7iZl9mbl9YEfVjM+zANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTEyMDMwMDAwMDBaFw0yMzAxMDEy MzU5NTlaMDAxLjAsBgNVBAMTJXByb2R1Y3Rpb24ubW9udGFscGluYS5zYWxlcy5k aWFyei5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPUmXSZDpt R0/hWft9bdxhbjuMPXSI6yCIMQZAQEpFQmNPHVfpozuOH8ibyaNLZQtlsSQnEXe1 LTAfv/U7fCm0c4DmxMjtPh5qhR05py0BR9OMl7jJfpN14dmvbFEHkgHnoqCrZt8w vf6p5lEPx2/tJqQVtc75RqLzIy/wiEN09JIcT8+xBRcv+mVFsKwIJSQoJ6GRtk41 AdrfSOMp2n2skiCKO+j77chVmBis2uDLcn1rOngY0IWw2LU7zjcfOymbDeKntnS+ 9S13Z3fmuaVJj56IcgJhkp8K7UIbhvJbfYd8GJ8+pDoxQvGzysJY/pjRfQ1af34j mZSAKvsk5DipAgMBAAGjggG8MIIBuDAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QH J5Z0W/k90DAdBgNVHQ4EFgQUPNK99GSZs/UfYQdgbpZIraFOeoQwWQYDVR0RBFIw UIIlcHJvZHVjdGlvbi5tb250YWxwaW5hLnNhbGVzLmRpYXJ6Lm5ldIInKi5wcm9k dWN0aW9uLm1vbnRhbHBpbmEuc2FsZXMuZGlhcnoubmV0MA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPQYDVR0fBDYwNDAyoDCg LoYsaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWItMS5jcmww EwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzAB hiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKG Kmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNV HRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB4M+XLXQC04MX0VKnX10Bh3oli7x10OFqyo28Yb7obFbIQzrzSEP9tGhT3k7k2 MOEjqCTFIQaswPMUdv4S43VQaVQ+2pEcyeB1uEcxZ+Tqp0RHYCBDzRcj9R1ewqUv FtrCdVmQMX+zlkE3hnFmao72vWjk3ekzINVg+Mkx8Cgy3RXFqwwybEUMCX6kEKeB Fx8vrXToitAhicF10UGENaXDRiUISO6lA/xnLBt6btocyzzIs1dW4vbDDVt+TuQs B2OlXf3cieahRucIjFetIApitZlbLtlFbv8ZEAvss0G198YoDMOIQAmx2cathcrs yAfaFRoq7N9Wfb+EyXTJDoWB -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1Jl0mQ6bUdP4Vn7fW3c YW47jD10iOsgiDEGQEBKRUJjTx1X6aM7jh/Im8mjS2ULZbEkJxF3tS0wH7/1O3wp tHOA5sTI7T4eaoUdOactAUfTjJe4yX6TdeHZr2xRB5IB56Kgq2bfML3+qeZRD8dv 7SakFbXO+Uai8yMv8IhDdPSSHE/PsQUXL/plRbCsCCUkKCehkbZONQHa30jjKdp9 rJIgijvo++3IVZgYrNrgy3J9azp4GNCFsNi1O843Hzspmw3ip7Z0vvUtd2d35rml SY+eiHICYZKfCu1CG4byW32HfBifPqQ6MULxs8rCWP6Y0X0NWn9+I5mUgCr7JOQ4 qQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16437950463441171224807470107561872635 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'production.montalpina.sales.diarz.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26171960968711631913599957460917542449772400498924183688556073594028713361192387778778599244062969555376958768696282347184771139397842830362442513140849730045902460724577939892931836727854654656106363219843956575778339062970462414971794690141343620575661113876001734689917885993569356983135657800447977173166254949747529935086792798025459435810712080133762785765025416074590515593859072522127817662934289129595559013603613166084849268919478851981055794479938680313599411274025488197840278691088218062660891370143192915523411597132405788496180286613090496284119273669420235273347350642770162900950595948126638967109801 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3cd2bdf46499b3f51f6107606e9648ada14e7a84 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production.montalpina.sales.diarz.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.production.montalpina.sales.diarz.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 007833e5cb5d00b4e0c5f454a9d7d74061de8962ef1d74385ab2a36f186fba1b15b210cebcd210ff6d1a14f793b93630e123a824c52106acc0f31476fe12e3755069543eda911cc9e075b8473167e4eaa74447602043cd1723f51d5ec2a52f16dac2755990317fb39641378671666a8ef6bd68e4dde93320d560f8c931f02832dd15c5ab0c326c450c097ea410a781171f2fad74e88ad02189c175d1418435a5c346250848eea503fc672c1b7a6eda1ccb3cc8b35756e2f6c30d5b7e4ee42c0763a55dfddc89e6a146e7088c57ad200a62b5995b2ed9456eff19100becb341b5f7c6280cc3884009b1d9c6ad85caecc807da151a2aecdf567dbf84c974c90e8581