acs.newsint.co.uk

- News UK and Ireland Limited -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 2a:c1:99:e8:e4:09:d9:c4:47:b5:6b:d3:c0:62:62:43 was issued on by GeoTrust Inc..

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

News UK and Ireland Limited

Organization: News UK and Ireland Limited
Organization unit: PROD_ACS
State / Province: London
Locality: London
Country: GB

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2a:c1:99:e8:e4:09:d9:c4:47:b5:6b:d3:c0:62:62:43
Serial Number (int): 56832810776841241355066451151550571075
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 91:57:cf:bd:1f:99:2a:5c:85:e6:32:c5:c0:ef:15:da:50:00:d4:7e
Fingerprint (sha256): 2d:c4:70:9c:cb:cf:ae:dc:3e:a3:4a:60:7e:bd:1b:76:54:22:77:f7:ac:2e:a0:d7:e0:af:54:ce:79:00:c7:74

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate acs.newsint.co.uk

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acs.newsint.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

login.thesundaytimes.co.uk
login.thescottishsun.co.uk
login.0x69416d.co.uk
login.the-tls.co.uk
login.mytimesplus.co.uk
login.page3.com
login.dreamteamfc.com
login.thesun.ie
login.timesmembership.com
login.thesun.co.uk
login.thetimes.co.uk
capi.newsint.co.uk
acs.newsint.co.uk

Other certificates including the domain name newsint.co.uk

(limited to 100 certificates)
remote.newsint.co.uk
newserpqas.newsint.co.uk
pim.newsint.co.uk
feeds.newsint.co.uk
ref.newsint.co.uk
newseccqas.newsint.co.uk
acs.newsint.co.uk
acs.newsint.co.uk
wfh.newsint.co.uk
training-xchange.newsint.co.uk
*.dev.nukcdn.com
pvlomspac03-pim.newsint.co.uk
datafeeds.newsint.co.uk
*.newsint.co.uk
wfh.newsint.co.uk
acs-staging.newsint.co.uk
capi-dev.newsint.co.uk
mogel.dev.newsint.co.uk
*.dev.nukcdn.com
feeds.newsint.co.uk
newseccdev.newsint.co.uk
feeds.newsint.co.uk
*.dev.nukcdn.com
iam.wpng.newsint.co.uk
join.newsint.co.uk
newsint.co.uk
diy.newsint.co.uk
remote.newsint.co.uk
acs.newsint.co.uk
ref.newsint.co.uk
ref.newsint.co.uk
*.stag.nukcdn.com
acs-staging.newsint.co.uk
acs-staging.newsint.co.uk
newserpqasec.newsint.co.uk
join.newsint.co.uk
mogel.newsint.co.uk
feeds.newsint.co.uk
acs.newsint.co.uk
acs-staging.newsint.co.uk
newsportal.newsint.co.uk
newsecc.newsint.co.uk
*.dev.nukcdn.com
adfs1.auth.newsint.co.uk
newserpqasec.newsint.co.uk
*.dev.nukcdn.com
newserpqasec.newsint.co.uk
join.newsint.co.uk
www.newsint.co.uk
stg-chp.newsint.co.uk
www.advertising.newsint.co.uk
www.advertising.newsint.co.uk
remote.newsint.co.uk
newsportalqas.newsint.co.uk
tvlolxaise01.newsint.co.uk
join.newsint.co.uk
tvlolxaise02.newsint.co.uk
secure.newsint.co.uk
acs-staging.newsint.co.uk
chef-prod.newsint.co.uk
acs-staging.newsint.co.uk
*.newsint.co.uk
pim.newsint.co.uk
remote.newsint.co.uk
pvlolxpisn04.newsint.co.uk
*.dev.nukcdn.com
*.nukcdn.com
newserpdev.newsint.co.uk
pvlolxpisn06.newsint.co.uk
join.newsint.co.uk
crmso-staging.newsint.co.uk
*.dev.nukcdn.com
acs.newsint.co.uk
*.newsint.co.uk
ak-crmso-hotfix.se.newsint.co.uk
*.dev.nukcdn.com
remote.newsint.co.uk
newsportaldev.newsint.co.uk
newskey.newsint.co.uk
*.dev.nukcdn.com
remote.newsint.co.uk
acs.newsint.co.uk
afp.newsint.co.uk
newseccqas.newsint.co.uk
newserpqasec.newsint.co.uk
feeds.newsint.co.uk
newseccdev.newsint.co.uk
crmso.newsint.co.uk
ref.newsint.co.uk
mogel.dev.newsint.co.uk
acs.newsint.co.uk
remote.newsint.co.uk
remote.newsint.co.uk
remote.newsint.co.uk
newserp.newsint.co.uk
acs.newsint.co.uk
chefauto-prod.newsint.co.uk
*.dev.nukcdn.com
join.newsint.co.uk
newserpdevec.newsint.co.uk

Certificate

The complete raw certificate details for acs.newsint.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0zmOHyAujzHn/I9GCgN
wqMam8Jpz2fnCNsQDTkJCbUtamPf3nVdnsAjUAB7xA605FFWON47VwfzKMljYZvO
fSJN6jnAiDF95tqJqx8artBqpP3XnekA+iiiMOQX5U8rNFW8COI8ozs8lA+2xaX4
+1cDbU2JQEvvVZmto5k307uKO1wR0cnznrAzlkc806S2jldxYjx9v43EBzI22lb6
FYnXXlW7dba0wkNYF6Asowyex9jw+syHQFw+3mGHCmNXPzolfMWWyEqz3oyA1+Xj
Ufq1llAcnqbPJZT8wQLlgAlJjGsDapEQG57fLmuU+1CkigMUo4pYELYQrI5aDdw5
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 56832810776841241355066451151550571075
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'News UK and Ireland Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PROD_ACS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'acs.newsint.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21119717387187225890395070553803062971874958395945196215108635359281265750746569258948249435090076250321985254328531562375661146396558553425683027090330234360815546918685540653019583728191919844880911859207843479034862189483643068348216776128005485808622844216657776870919609622027265453943169522249417954649473695243420113875406268632700647171139244907111183218499994113339749235855034888561872737609845365043733496839822682033237683826072282180772608172052724735311926218014675853170103634968576287760903185739353589026347760552034998697498841377855360222063330429525893419124670721710744310360115640223536483416427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (293 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.thesundaytimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.thescottishsun.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.0x69416d.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.the-tls.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.mytimesplus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.page3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.dreamteamfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.thesun.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.timesmembership.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.thesun.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.thetimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capi.newsint.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acs.newsint.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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