api.canary.ricohspaces.app
Issued by GTS CA 1D2
About this certificate
This digital certificate with serial number b0:8e:6a:63:c6:13:fa:ca:0a:00:00:00:00:95:ef:6c was issued on by Google Trust Services.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=api.canary.ricohspaces.app
Google Trust Services
Organization:
Google Trust Services
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): b0:8e:6a:63:c6:13:fa:ca:0a:00:00:00:00:95:ef:6cSerial Number (int): 234683591252365400997338331060425322348
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 21:e6:7f:5d:a0:48:1a:c3:d4:ee:84:a2:8a:7a:7c:cf:c9:60:65:50
AuthorityKeyId: b1:dd:32:5d:e8:b7:37:72:d2:ce:5c:ce:26:fe:47:79:e2:01:08:e9
Fingerprint (sha1): 05:ed:81:e9:7d:6f:d4:c8:00:46:d8:63:f3:bc:99:d7:87:45:06:75
Fingerprint (sha256): 2f:2e:1a:b9:e6:48:6f:c8:19:b5:d1:4e:25:12:26:29:d3:dc:79:62:fd:d2:bc:e8:da:b9:57:dc:3b:61:2c:75
Issuing Certificate URL: http://pki.goog/gsr2/GTS1D2.crt
Revocation information
OCSP Server: http://ocsp.pki.goog/gts1d2CRL Distribution Point: http://crl.pki.goog/GTS1D2.crl
Check the revocation status for certificate api.canary.ricohspaces.app
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api.canary.ricohspaces.app
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.canary.ricohspaces.app
Other certificates including the domain name ricohspaces.app
(limited to 100 certificates)
canary.outlook-addin.ricohspaces.app
watchers.ricohspaces.app
next.ricohspaces.app
watchers.ricohspaces.app
*.ricohspaces.app
admin.ricohspaces.app
outlook-addin.ricohspaces.app
canary.ricohspaces.app
bots.ricohspaces.app
support.ricohspaces.app
www.get.ricohspaces.app
bots.ricohspaces.app
api.ricohspaces.app
canary.admin.ricohspaces.app
theserot.com
api.canary.ricohspaces.app
canary.ricohspaces.app
api.next.ricohspaces.app
test.ricohspaces.app
test.displays.ricohspaces.app
canary.outlook-addin.ricohspaces.app
test.ricohspaces.app
supplier.thegifter.co.nz
watchers.ricohspaces.app
canary.displays.ricohspaces.app
smscapa.com
components.ricohspaces.app
ricohspaces.app
get.ricohspaces.app
api.test.ricohspaces.app
outlook-addin.ricohspaces.app
api.ricohspaces.app
surveys-graph.ricohspaces.app
www.hlavac-business.com
canary.displays.ricohspaces.app
admin.ricohspaces.app
canary.ricohspaces.app
www.get.ricohspaces.app
get.ricohspaces.app
support.ricohspaces.app
smscapa.com
api.test.ricohspaces.app
watchers.ricohspaces.app
bots.canary.ricohspaces.app
admin.ricohspaces.app
behtarlife.in
canary.ricohspaces.app
semadashboardinternalstage.talktosema.org
mandolin.com
get.ricohspaces.app
next.ricohspaces.app
bots.canary.ricohspaces.app
api.next.ricohspaces.app
support.ricohspaces.app
canary.ricohspaces.app
cors.ricohspaces.app
canary.displays.ricohspaces.app
support.ricohspaces.app
admin.ricohspaces.app
displays.ricohspaces.app
api.canary.ricohspaces.app
www.imgproductora.com
api.next.ricohspaces.app
test.displays.ricohspaces.app
www.imgproductora.com
get.ricohspaces.app
watchers.ricohspaces.app
*.ricohspaces.app
test.ricohspaces.app
test.ricohspaces.app
test.ricohspaces.app
maps.ricohspaces.app
ricohspaces.app
api.test.ricohspaces.app
api.canary.ricohspaces.app
api.canary.ricohspaces.app
test.displays.ricohspaces.app
canary.displays.ricohspaces.app
support.ricohspaces.app
bots.ricohspaces.app
surveys.ricohspaces.app
surveys.ricohspaces.app
support.ricohspaces.app
support.ricohspaces.app
ricohspaces.app
next.ricohspaces.app
cors.ricohspaces.app
canary.ricohspaces.app
outlook-addin.ricohspaces.app
get.ricohspaces.app
canary.admin.ricohspaces.app
mobilityware.12traits.com
canary.outlook-addin.ricohspaces.app
canary.ricohspaces.app
maps.ricohspaces.app
www.get.ricohspaces.app
www.get.ricohspaces.app
api.canary.ricohspaces.app
api.next.ricohspaces.app
api.canary.ricohspaces.app
watchers.ricohspaces.app
next.ricohspaces.app
watchers.ricohspaces.app
*.ricohspaces.app
admin.ricohspaces.app
outlook-addin.ricohspaces.app
canary.ricohspaces.app
bots.ricohspaces.app
support.ricohspaces.app
www.get.ricohspaces.app
bots.ricohspaces.app
api.ricohspaces.app
canary.admin.ricohspaces.app
theserot.com
api.canary.ricohspaces.app
canary.ricohspaces.app
api.next.ricohspaces.app
test.ricohspaces.app
test.displays.ricohspaces.app
canary.outlook-addin.ricohspaces.app
test.ricohspaces.app
supplier.thegifter.co.nz
watchers.ricohspaces.app
canary.displays.ricohspaces.app
smscapa.com
components.ricohspaces.app
ricohspaces.app
get.ricohspaces.app
api.test.ricohspaces.app
outlook-addin.ricohspaces.app
api.ricohspaces.app
surveys-graph.ricohspaces.app
www.hlavac-business.com
canary.displays.ricohspaces.app
admin.ricohspaces.app
canary.ricohspaces.app
www.get.ricohspaces.app
get.ricohspaces.app
support.ricohspaces.app
smscapa.com
api.test.ricohspaces.app
watchers.ricohspaces.app
bots.canary.ricohspaces.app
admin.ricohspaces.app
behtarlife.in
canary.ricohspaces.app
semadashboardinternalstage.talktosema.org
mandolin.com
get.ricohspaces.app
next.ricohspaces.app
bots.canary.ricohspaces.app
api.next.ricohspaces.app
support.ricohspaces.app
canary.ricohspaces.app
cors.ricohspaces.app
canary.displays.ricohspaces.app
support.ricohspaces.app
admin.ricohspaces.app
displays.ricohspaces.app
api.canary.ricohspaces.app
www.imgproductora.com
api.next.ricohspaces.app
test.displays.ricohspaces.app
www.imgproductora.com
get.ricohspaces.app
watchers.ricohspaces.app
*.ricohspaces.app
test.ricohspaces.app
test.ricohspaces.app
test.ricohspaces.app
maps.ricohspaces.app
ricohspaces.app
api.test.ricohspaces.app
api.canary.ricohspaces.app
api.canary.ricohspaces.app
test.displays.ricohspaces.app
canary.displays.ricohspaces.app
support.ricohspaces.app
bots.ricohspaces.app
surveys.ricohspaces.app
surveys.ricohspaces.app
support.ricohspaces.app
support.ricohspaces.app
ricohspaces.app
next.ricohspaces.app
cors.ricohspaces.app
canary.ricohspaces.app
outlook-addin.ricohspaces.app
get.ricohspaces.app
canary.admin.ricohspaces.app
mobilityware.12traits.com
canary.outlook-addin.ricohspaces.app
canary.ricohspaces.app
maps.ricohspaces.app
www.get.ricohspaces.app
www.get.ricohspaces.app
api.canary.ricohspaces.app
api.next.ricohspaces.app
api.canary.ricohspaces.app
Certificate
The complete raw certificate details for api.canary.ricohspaces.app in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEYTCCA0mgAwIBAgIRALCOamPGE/rKCgAAAACV72wwDQYJKoZIhvcNAQELBQAw QjELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczET MBEGA1UEAxMKR1RTIENBIDFEMjAeFw0yMTAxMTIxMzI1NDJaFw0yMTA0MTIxMzI1 NDJaMCUxIzAhBgNVBAMTGmFwaS5jYW5hcnkucmljb2hzcGFjZXMuYXBwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1W89InDFyMBXOM7XoYwi3nP5pQ9Y NKaZo4eLwLVgmh6z6Xsd0zN3NXusHX9dC/6um6y6cJUrkspwPNyjSFSVYBHTn9nM IpqbF8QEVjQ2oiBqi2ul4lpQzF0AL5881nOVAfC+HOYdYtkh06rvepa6ZeLviEhp N19fWCRzUOhALpEOfQ+WOg1DSX4HTa0PXiMt2QQcNtAAj/KfVz0WISRP5VI7t0+b t/NSQghxLmmgvL1/AMTENBC2d7OnRO10YLyYQKV5lc5BAT51k/7aZxmD1+5CJNOq anlENVEtpx9JZ+omllcRVG8cLd10un0vIp2AURjacV+zpf33NNo12AhrXQIDAQAB o4IBbTCCAWkwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwG A1UdEwEB/wQCMAAwHQYDVR0OBBYEFCHmf12gSBrD1O6Eoop6fM/JYGVQMB8GA1Ud IwQYMBaAFLHdMl3otzdy0s5czib+R3niAQjpMGQGCCsGAQUFBwEBBFgwVjAnBggr BgEFBQcwAYYbaHR0cDovL29jc3AucGtpLmdvb2cvZ3RzMWQyMCsGCCsGAQUFBzAC hh9odHRwOi8vcGtpLmdvb2cvZ3NyMi9HVFMxRDIuY3J0MCUGA1UdEQQeMByCGmFw aS5jYW5hcnkucmljb2hzcGFjZXMuYXBwMCEGA1UdIAQaMBgwCAYGZ4EMAQIBMAwG CisGAQQB1nkCBQMwLwYDVR0fBCgwJjAkoCKgIIYeaHR0cDovL2NybC5wa2kuZ29v Zy9HVFMxRDIuY3JsMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQCX1I6TmMSmJen/Z2tBTvaTFabWcLiaxxd/ch4QSBkBcoR0sUIuYMTdpzFS R+jCsBRF+qaY4ijT6tOMjH5frBo5XeWRjtbjT6uQ6mWC0JEabspNB89uIvR0qbrz a8Ynzh2IvG41Kh8tACGf/aril16c1plCEVBbB6AKnbncv2DpabimBa9xZWZHgKB1 4DvExTc08kSR6wlyzcwvecis9CMql/RU6k/+kL919L0eYt1xplTOrJE/QFmehky3 2nu3a8b0Sk/JL2KMvxgCDIyoc3zsBn1medxtjdp/7tp1tjC4HpbQ1kJkswkO4yxX Mpv6ByT2mMEKg32qNwkzAlrIqj6X -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1W89InDFyMBXOM7XoYwi 3nP5pQ9YNKaZo4eLwLVgmh6z6Xsd0zN3NXusHX9dC/6um6y6cJUrkspwPNyjSFSV YBHTn9nMIpqbF8QEVjQ2oiBqi2ul4lpQzF0AL5881nOVAfC+HOYdYtkh06rvepa6 ZeLviEhpN19fWCRzUOhALpEOfQ+WOg1DSX4HTa0PXiMt2QQcNtAAj/KfVz0WISRP 5VI7t0+bt/NSQghxLmmgvL1/AMTENBC2d7OnRO10YLyYQKV5lc5BAT51k/7aZxmD 1+5CJNOqanlENVEtpx9JZ+omllcRVG8cLd10un0vIp2AURjacV+zpf33NNo12Ahr XQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 234683591252365400997338331060425322348 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-12 13:25:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-12 13:25:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.canary.ricohspaces.app' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26943612857821921260180386114816200622040305572617169283698214776955212990762307076465910553256532027813217240256605593958703349823294231879613546534784184672476839599660976236925476390178201432533664264978084777463152787810160264853234527112146820049542148752188765385408729861205295047145139309736091155377337107990693180087773677106072384903459719476701348770454216258251277904745088558600784106845507456651031725368511300345388446609748629341909037221065462727548179915953247085590295943003110849509169721300831092886497822601854332763636514685090152479157837073725767864799109027733840593813388408760102189296477 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 21e67f5da0481ac3d4ee84a28a7a7ccfc9606550 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b1dd325de8b73772d2ce5cce26fe4779e20108e9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d2' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1D2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.canary.ricohspaces.app' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1D2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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