sonymovies.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 0a:a5:d5:41:44:c9:c5:10:d4:a3:91:3e:08:78:1b:79 was issued on by Amazon.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=sonymovies.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:a5:d5:41:44:c9:c5:10:d4:a3:91:3e:08:78:1b:79Serial Number (int): 14153334263872451894989132531727080313
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 8b:75:b6:ba:f1:6c:73:ad:09:bc:a9:88:f2:30:6b:c1:1a:58:1f:0b
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 7e:c6:2a:d6:34:ab:aa:9f:c3:b5:03:6c:94:30:d9:bf:3c:69:45:be
Fingerprint (sha256): 2f:49:46:6c:83:5c:3c:53:3d:46:60:d2:ea:8f:81:6d:73:4e:cf:a1:27:4e:4b:8d:b8:49:aa:40:fc:53:aa:37
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate sonymovies.com
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sonymovies.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sonymovies.com
www.sonypicturethis.com
la.sonychannel.com
www.axn.com.br
sonychannel.com.mx
www.sonymovies.com
br.axn.com
www.sonypicturethis.com
la.sonychannel.com
www.axn.com.br
sonychannel.com.mx
www.sonymovies.com
br.axn.com
Other certificates including the domain name sonymovies.com
(limited to 100 certificates)
la.sonymovies.com
la.axn.com
staging.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
staging.cinesony.com
sonymovies.com
edge-affiliates.cinesony.com
staging.cinesony.com
affiliates.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
staging.cinesony.com
affiliates.cinesony.com
affiliates.cinesony.com
staging.cinesony.com
staging.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
affiliates.cinesony.com
edge-affiliates.cinesony.com
staging.cinesony.com
edge-affiliates.cinesony.com
staging.cinesony.com
edge-affiliates.cinesony.com
la.axn.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
la.axn.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
la.axn.com
edge-affiliates.cinesony.com
staging.cinesony.com
la.axn.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
la.axn.com
edge-affiliates.cinesony.com
affiliates.cinesony.com
edge-affiliates.cinesony.com
staging.cinesony.com
edge-affiliates.cinesony.com
affiliates.cinesony.com
la.sonymovies.com
edge-affiliates.cinesony.com
staging.cinesony.com
la.sonymovies.com
edge-affiliates.cinesony.com
la.sonymovies.com
affiliates.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
staging.cinesony.com
staging.cinesony.com
la.sonymovies.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
affiliates.cinesony.com
la.axn.com
edge-affiliates.cinesony.com
staging.cinesony.com
la.axn.com
staging.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
sonymovies.com
staging.cinesony.com
sonymovies.com
la.axn.com
staging.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
staging.cinesony.com
sonymovies.com
edge-affiliates.cinesony.com
staging.cinesony.com
affiliates.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
staging.cinesony.com
affiliates.cinesony.com
affiliates.cinesony.com
staging.cinesony.com
staging.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
affiliates.cinesony.com
edge-affiliates.cinesony.com
staging.cinesony.com
edge-affiliates.cinesony.com
staging.cinesony.com
edge-affiliates.cinesony.com
la.axn.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
la.axn.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
la.axn.com
edge-affiliates.cinesony.com
staging.cinesony.com
la.axn.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
la.axn.com
edge-affiliates.cinesony.com
affiliates.cinesony.com
edge-affiliates.cinesony.com
staging.cinesony.com
edge-affiliates.cinesony.com
affiliates.cinesony.com
la.sonymovies.com
edge-affiliates.cinesony.com
staging.cinesony.com
la.sonymovies.com
edge-affiliates.cinesony.com
la.sonymovies.com
affiliates.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
staging.cinesony.com
staging.cinesony.com
la.sonymovies.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
affiliates.cinesony.com
la.axn.com
edge-affiliates.cinesony.com
staging.cinesony.com
la.axn.com
staging.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
sonymovies.com
staging.cinesony.com
sonymovies.com
Certificate
The complete raw certificate details for sonymovies.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgIQCqXVQUTJxRDUo5E+CHgbeTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDIwOTAwMDAwMFoXDTIzMDYxNDIzNTk1OVowGTEX MBUGA1UEAxMOc29ueW1vdmllcy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQCz+K2KUahv/TqkE5trj0oHQ3EZGQ3RKQ01PGoZrTZB26LwXIFCWzDb FyVl5Zez/zW6KFujHwvTPVXY7Rt9c/6Golqd4uaYEjG9CSupf8VeOJqdrCtEmPfD xxqU2KsUl2nVVpwtxuUPWn3ilvzVPx5vvirqu3GPKvvjmF2W2l/Rw2AbBO7EIQv/ /t/r+dVoYGnWXu7e3czC+m1H+RIuDL46w+ZF1F4nj8QN1HZWEOPMiJsjNUwyj1o4 pGNSNbJiJOQ+zh+NFNwe09L5zqOuBmwxprgoJXVdy8eSfjJejidHbQ5V4IicfqWz h8BZ7pmF9BlnbwK/uN5WnLLyA4x9u9J5AgMBAAGjggHuMIIB6jAfBgNVHSMEGDAW gBSBuA5jiokSGOX6OztQlZ/m5ZAThTAdBgNVHQ4EFgQUi3W2uvFsc60JvKmI8jBr wRpYHwswgYwGA1UdEQSBhDCBgYIOc29ueW1vdmllcy5jb22CF3d3dy5zb255cGlj dHVyZXRoaXMuY29tghJsYS5zb255Y2hhbm5lbC5jb22CDnd3dy5heG4uY29tLmJy ghJzb255Y2hhbm5lbC5jb20ubXiCEnd3dy5zb255bW92aWVzLmNvbYIKYnIuYXhu LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDEuYW1hem9udHJ1 c3QuY29tL3IybTAxLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcB AQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAxLmFtYXpvbnRydXN0 LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMS5hbWF6b250cnVzdC5j b20vcjJtMDEuY2VyMAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAw DQYJKoZIhvcNAQELBQADggEBALn4Rmx2wekK8wLCitXffPY9KG1l2Dd+tKgaZX0G ef+xgPhaP0qewtDThjaZiNmtU/IGo8MhEfHhgfQMS5Pn6ilifPLu5RSYTSsZwMrU 9yTfw+/5c7dcpqVREEMTdFLAM2nxB88GzXcDUywuBhuXZ2b1KOIbq5FS8p5xIJkU I/aCffEk+n5+kG3590SDt+sxQNSX3Wk1vOvwJ4xW0McZKC7be9uf8JY9nnpb2SQv Sw6xC/eb7g2CvRlZpUVkVhG8iWwElA3vNHFmrGOoEGFzrwo+aOjO6hCsNY4jVv2n cpjwogf5U5w9QptbqqvvGu7m3VsoysjSVOkp3WX65vA2pVM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/itilGob/06pBOba49K B0NxGRkN0SkNNTxqGa02Qdui8FyBQlsw2xclZeWXs/81uihbox8L0z1V2O0bfXP+ hqJaneLmmBIxvQkrqX/FXjianawrRJj3w8calNirFJdp1VacLcblD1p94pb81T8e b74q6rtxjyr745hdltpf0cNgGwTuxCEL//7f6/nVaGBp1l7u3t3MwvptR/kSLgy+ OsPmRdReJ4/EDdR2VhDjzIibIzVMMo9aOKRjUjWyYiTkPs4fjRTcHtPS+c6jrgZs Maa4KCV1XcvHkn4yXo4nR20OVeCInH6ls4fAWe6ZhfQZZ28Cv7jeVpyy8gOMfbvS eQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14153334263872451894989132531727080313 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-14 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sonymovies.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22719284227780597737254853393568937349639433262976660491413170068843176227043867648142486733908481847144426401185650230889041382958325550294538156182184405220117021241141350186990483571923347706313095840884251482309922262141956864437222582301337603503841542370517848620656341532140834447082578652747982462264598785312832850926202731384120778023037935465659145198963177749877262052255402124794334497334127861735950918150086677479018637859222970136751166340903893758273672035543707118944962362592247198735551089594749094213771399172110886019492011100317329490562513207372614178683459930173765335652978713347183116800633 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8b75b6baf16c73ad09bca988f2306bc11a581f0b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (132 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonymovies.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypicturethis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la.sonychannel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.axn.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonychannel.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonymovies.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br.axn.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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