esf.unisyncgroup.com

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0b:57:ec:51:b5:0e:0b:69:bd:4c:40:e2:26:6b:47:88 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=esf.unisyncgroup.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:57:ec:51:b5:0e:0b:69:bd:4c:40:e2:26:6b:47:88
Serial Number (int): 15078030902507995690973277736770684808
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6c:70:29:4c:7e:39:fa:d1:1c:52:53:80:1e:b0:f0:e8:fa:bc:43:50
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 84:4c:36:b4:73:28:84:b1:1d:44:ea:32:df:27:b1:74:72:ed:82:ba
Fingerprint (sha256): 2d:f4:a3:0e:d7:89:f7:59:d8:64:3a:5e:d1:f2:b9:a6:d2:49:73:16:99:09:15:4e:c9:a4:91:8e:14:73:27:bf

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate esf.unisyncgroup.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for esf.unisyncgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

esf.unisyncgroup.com

Other certificates including the domain name unisyncgroup.com

(limited to 100 certificates)
unisyncgroup.com
unisyncgroup.com
www2.unisyncgroup.com
helpdesk.lpga.com
mesa4.aylsoluciones.pw
esf.unisyncgroup.com
fr.unisyncgroup.com
mesa4.aylsoluciones.pw
itsupport.pando.ai
unisyncgroup.com
unisyncgroup.ca
helpdesk.clicktechretail.com
servicedesk.oneontacsd.org
esf.unisyncgroup.com
portal.dakotalandfcu.com
unisyncgroup.com
helpdesk.lpga.com
itsupport.waycool.in
esf.unisyncgroup.com
helpdesk.admix.com
servicedesk.metro-inet.us
servicedesk.stevinrock.ae
lecitsupport.maf.ae
portal.dakotalandfcu.com
unisyncgroup.com
esf.unisyncgroup.com
www.aircanada.unisyncgroup.com
mesa4.aylsoluciones.pw
destek.coreway.com.tr
helpdesk.unisyncgroup.com
unisyncgroup.com
servicedesk.stevinrock.ae
portal.dakotalandfcu.com
itsupport.pando.ai
unisyncgroup.com
fr.unisyncgroup.com
fr.unisyncgroup.com
unisyncgroup.com
fr.unisyncgroup.com
voc.utc-egy.net
aircanada.unisyncgroup.com
helpdesk.lpga.com
mesa4.aylsoluciones.pw
unisyncgroup.com
mesa4.aylsoluciones.pw
servicedesk.metro-inet.us
esf.unisyncgroup.com
mail.unisyncgroup.com
unisyncgroup.com
mesa4.aylsoluciones.pw
unisyncgroup.com
www.aircanada.unisyncgroup.com
lecitsupport.maf.ae
itsupport.qholding.com
unisyncgroup.com
unisyncgroup.com
scorpiontravels.sdpapac.org
fr.unisyncgroup.com
unisyncgroup.com
destek.coreway.com.tr
unisyncgroup.ca
unisyncgroup.com
fr.unisyncgroup.com
helpdesk.intrepidmuseum.org
servicedesk.metro-inet.us
support.access2arabia.com
unisyncgroup.com
unisyncgroup.com
esf.unisyncgroup.com
unisyncgroup.com
unisyncgroup.com
mesa4.aylsoluciones.pw
unisyncgroup.com
mesa4.aylsoluciones.pw
fr.unisyncgroup.com
encompasshelp.coastal-bev.com
mesa4.aylsoluciones.pw
b2b.unisyncgroup.com
helpdesk.admix.com
itsupport.waycool.in
mesa4.aylsoluciones.pw
unisyncgroup.ca
mesa4.aylsoluciones.pw
fr.unisyncgroup.com
sac.spark-factory.ca
mesa4.aylsoluciones.pw
helpdesk.clicktechretail.com
portal.dakotalandfcu.com
destek.coreway.com.tr
mesa4.aylsoluciones.pw
www.aircanada.unisyncgroup.com
unisyncgroup.ca
unisyncgroup.com
unisyncgroup.com
helpdesk.unisyncgroup.com
itsupport.qholding.com
lecitsupport.maf.ae
mesa4.aylsoluciones.pw
mesa4.aylsoluciones.pw
servicedesk.metro-inet.us

Certificate

The complete raw certificate details for esf.unisyncgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEwjCCA6qgAwIBAgIQC1fsUbUOC2m9TEDiJmtHiDANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xOTA4MTUwMDAwMDBaFw0yMDA5MTMxMjAwMDBaMB8xHTAbBgNVBAMTFGVzZi51
bmlzeW5jZ3JvdXAuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
9AgGB4SzVBDCr9IkEgr1LGA7rz9pqEoI/ud0lzvJ6sMxuDRY6K9gftShXHzpr+Y6
z4ZgpTzGAZEsc+7jpe73/KPyqIVprbQl8+wvVvYVRUySyKnw/ve+9IHeY7OGw7ha
ninFEqyFEAKf7qCjbAlak6wae7FnJhk+3fC5/8n1kBQxQ9Haa9hN93f+eEafOENL
G/zydpcq+maUzAooC5JAx+PIna18agSV8oafmWac2SGvfw3i0aPnjQhdicdBeNgW
JXRqqp/jsSWLcLuFEWp4Jh5dJ4CYu0JqzB27sHul1DcTRVeGC2PS9CljImLiuShg
xmnffGilMUH3tPJVyWN37wIDAQABo4IBuTCCAbUwHwYDVR0jBBgwFoAUkFj/sJx1
qFFUd7Ht8qNDFjiebMUwHQYDVR0OBBYEFGxwKUx+OfrRHFJTgB6w8Oj6vENQMB8G
A1UdEQQYMBaCFGVzZi51bmlzeW5jZ3JvdXAuY29tMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPgYDVR0fBDcwNTAzoDGgL4Yt
aHR0cDovL2NkcC5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3JsMEwG
A1UdIARFMEMwNwYJYIZIAYb9bAECMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3
LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAmBggr
BgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVzdC5jb20wPQYIKwYBBQUHMAKG
MWh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5j
cnQwCQYDVR0TBAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAeIdHmJMXk95ll7udyGJfW13qji1x23PgZ7A8uRdaouOl0rjeAk6fYmlk
/7KchkVjcaOh/2cELzXUbzKXu3MjGDr+Wd/hbDQDXAJSsIbcQfEbE7Wh/DS1S7X8
zNZhO3oBnbYYcFZnXOVfErjFbFZd7B+4kl6mNdALVJEJt5p6vd7uEe7uRAVS5tfK
6osAT86G7T8+6G0r2YjtZAzy3huzM5nCklh527Eg25ANkqtZuC7WAi2VEc2QjDRm
SJY7l2pZ6g2srnanmX87nuIc7hcN7VhRQBcrayQ7Tmgr4uBkDTn8YljAMegpm6kc
UVaVM/qNmCqNoS80qQ9Lrf8C4xOIjQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9AgGB4SzVBDCr9IkEgr1
LGA7rz9pqEoI/ud0lzvJ6sMxuDRY6K9gftShXHzpr+Y6z4ZgpTzGAZEsc+7jpe73
/KPyqIVprbQl8+wvVvYVRUySyKnw/ve+9IHeY7OGw7haninFEqyFEAKf7qCjbAla
k6wae7FnJhk+3fC5/8n1kBQxQ9Haa9hN93f+eEafOENLG/zydpcq+maUzAooC5JA
x+PIna18agSV8oafmWac2SGvfw3i0aPnjQhdicdBeNgWJXRqqp/jsSWLcLuFEWp4
Jh5dJ4CYu0JqzB27sHul1DcTRVeGC2PS9CljImLiuShgxmnffGilMUH3tPJVyWN3
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15078030902507995690973277736770684808
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'esf.unisyncgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30806102972781573432411132677737129651442523029879649713787227193073608610028054563810043292257996540409386897189152699993360417839540005462195888369549967477624017395927395469581802605004431676288488871211658206151718189408353633826445980275399780602081275685126307115217251671791104825898254398502368115375476404853432422319119683418726502613849043747376413625991450915714539658247092561973361499239779796146938603170603372085763218808484289155709068240886487279726779492778182284086434470229911953466084960534494472943557501181733233642396618428557972043457763374339801066659253042856826625876801019658428725032943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c70294c7e39fad11c5253801eb0f0e8fabc4350
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esf.unisyncgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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