poc-canopee-arcgisserverx.hp.m-ve.com

Issued by Amazon

About this certificate

This digital certificate with serial number 09:29:47:9f:ed:e6:3f:2d:aa:69:50:00:99:bd:40:38 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=poc-canopee-arcgisserverx.hp.m-ve.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:29:47:9f:ed:e6:3f:2d:aa:69:50:00:99:bd:40:38
Serial Number (int): 12177388855250168443175275445396258872
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: fd:3e:e3:34:5b:92:c6:7a:be:cc:91:6d:0c:4b:a5:7e:c7:14:6f:ca
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): d1:4a:24:2b:b5:67:33:ae:04:3f:77:18:61:45:55:98:1c:7a:d1:95
Fingerprint (sha256): 30:56:37:22:b3:d2:94:f3:1f:c9:c5:80:b9:37:f3:d5:7a:ce:46:32:32:7a:11:fc:5e:17:a2:3d:ac:68:92:fe

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate poc-canopee-arcgisserverx.hp.m-ve.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for poc-canopee-arcgisserverx.hp.m-ve.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

poc-canopee-arcgisserverx.hp.m-ve.com

Other certificates including the domain name m-ve.com

(limited to 100 certificates)
rec-pp-fr.hp.m-ve.com
pilote-fr.m-ve.com
pprd-travo.m-ve.com
lerne-backend-rec.hp.m-ve.com
int-backend-pp.hp.m-ve.com
www.m-ve.com
moveo-api-for.hp.m-ve.com
prd-map-server.m-ve.com
qual-map-server.hp.m-ve.com
prod-backend-pp.m-ve.com
rec2-pp.hp.m-ve.com
lineo-national.m-ve.com
lerne-rec.indus.m-ve.com
qualif.m-ve.com
rec4-travo.hp.m-ve.com
qrstock-int.hp.m-ve.com
test.m-ve.com
pprd.m-ve.com
pre2-ael-externe.m-ve.com
dev-backend-teleo-pat.hp.m-ve.com
prd-canopeeadminws.m-ve.com
socle-alertes-api-qual.hp.m-ve.com
alarmes.hp.m-ve.com
portail-planif.m-ve.com
portail-planif.m-ve.com
rlv.m-ve.com
hpd-canopee-arcgisserverxx.hp.m-ve.com
formation.m-ve.com
rlv.m-ve.com
prd-canopee-arcgisserverxx.m-ve.com
recette2.hp.m-ve.com
pre-ael-externe.m-ve.com
travo.m-ve.com
vams-tst.m-ve.com
op-oracle-db.hp.m-ve.com
picru-api.hp.m-ve.com
backend-teleo-rem.m-ve.com
socle-alertes-api-rec.hp.m-ve.com
recf-canopee-mapwebws.hp.m-ve.com
rec-ael-internal.hp.m-ve.com
rlv.m-ve.com
api-docs.m-ve.com
qualif.m-ve.com
rec-monportail.hp.m-ve.com
recf2-canopee-frontal.hp.m-ve.com
teleo-monitoring-qualif.hp.m-ve.com
pilote.m-ve.com
recette-backend-pp-fr.hp.m-ve.com
lineo-dev.hp.m-ve.com
sav.hp.m-ve.com
prepar.m-ve.com
travo-qualif.hp.m-ve.com
www.m-ve.com
for-backend-pp-fr.hp.m-ve.com
rec2-backend-pp.hp.m-ve.com
rec-backend-teleo-rem.hp.m-ve.com
pprd.m-ve.com
teleo.m-ve.com
dev-backend-teleo-pat.hp.m-ve.com
lerne-backend-rec.indus.m-ve.com
ael-rec-alb.hp.m-ve.com
*.indus.m-ve.com
rec-rlv.hp.m-ve.com
rec-backend-teleo-pat.hp.m-ve.com
lerne.indus.m-ve.com
intervention-api.hp.m-ve.com
www2.m-ve.com
prd-canopeeadminws.m-ve.com
prd-canopee-jenkins.m-ve.com
energy-lab.veolia.fr
dev-backend-teleo-pat.hp.m-ve.com
moveo-int.hp.m-ve.com
poc-canopee-arcgisserverx.hp.m-ve.com
moveo-for.hp.m-ve.com
opus.m-ve.com
api-docs-backend.m-ve.com
pilote.m-ve.com
recette-backend-pp-fr.hp.m-ve.com
int-map-server.hp.m-ve.com
rec-backend-teleo-pat.hp.m-ve.com
dev-backend-teleo-pat.hp.m-ve.com
pre-rlv.m-ve.com
map.m-ve.com
www.m-ve.com
hme-website.hp.m-ve.com
recette.m-ve.com
map.m-ve.com
recette2.hp.m-ve.com
backend-gdc-setom-rec.hp.m-ve.com
int-travo.hp.m-ve.com
teleo-monitoring.m-ve.com
pilote.m-ve.com
token.m-ve.com
www.m-ve.com
api-docs.m-ve.com
rem-dev.hp.m-ve.com
pilote-portail-planif.m-ve.com
rec-pp-fr.hp.m-ve.com
travo.m-ve.com
recette-fr.hp.m-ve.com

Certificate

The complete raw certificate details for poc-canopee-arcgisserverx.hp.m-ve.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEoDCCA4igAwIBAgIQCSlHn+3mPy2qaVAAmb1AODANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODExMjIwMDAwMDBaFw0xOTEyMjIx
MjAwMDBaMDAxLjAsBgNVBAMTJXBvYy1jYW5vcGVlLWFyY2dpc3NlcnZlcnguaHAu
bS12ZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmO3vDn7X2
PavjsapvqJ9zzNMkEghXBDvdXv5IW60itzU5u3OGAnhsBuusi4YgmS7mUJLA48eZ
dd1H9yOERyHsxwL974a8kZVhpLZA1QC1Ks7LkCTFi/AYTkl7mzWkvaY/RUFxiNfj
YTyHDbs7g3x4XzvbesU90Q76XOS/TmFAK737eu9sMirqL8nTqoIn1oGQiSWXiWW1
eNXPRH2Rc2H/JFkxa6qTEwT7Djk/mEAgIbwItyJ/PJejXSgr+EUlHlkueKYMl3YR
DxxLVlrRcjas++VQU0DSTi/2zEOIM1b9+Vo3ZX83odGtMg3bYVRp4DQN99kQ37S5
SRBhC/XC0Gf1AgMBAAGjggGeMIIBmjAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QH
J5Z0W/k90DAdBgNVHQ4EFgQU/T7jNFuSxnq+zJFtDEulfscUb8owMAYDVR0RBCkw
J4IlcG9jLWNhbm9wZWUtYXJjZ2lzc2VydmVyeC5ocC5tLXZlLmNvbTAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0
MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFi
LmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUH
AQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVz
dC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3Qu
Y29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUA
MA0GCSqGSIb3DQEBCwUAA4IBAQBGbPAP0cdFE/ixCAvUU+NuLuaKrQoszMAeDaQi
JUvb4ErzfzD4p1J34THbPiUH2b86+PXZ7GvjtCFlkWmwLFAMR/EMsoTqAaJ0m65g
irLbFVekTUY/qkcCnTz3yscyO95iNTsazcBmhGzN9ZSoyp2zJDMfKgJzO6GCQkeg
Tj28Bq2Ein+Y2QoJS45d6JEmF61K2kC6vagpeApe6abc26ps7S4sfVevEgdVKUKi
Z8gDz1IMNSPxbsIox0gOIgteie6zzgIDup4bc+ODwFcZGRuysZrqz0kHzteOiCR1
W+iXgs+skKBXORxybg0EX5J0dX5F+ZZiA4nrqjZxkiJQxKq7
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjt7w5+19j2r47Gqb6if
c8zTJBIIVwQ73V7+SFutIrc1ObtzhgJ4bAbrrIuGIJku5lCSwOPHmXXdR/cjhEch
7McC/e+GvJGVYaS2QNUAtSrOy5AkxYvwGE5Je5s1pL2mP0VBcYjX42E8hw27O4N8
eF8723rFPdEO+lzkv05hQCu9+3rvbDIq6i/J06qCJ9aBkIkll4lltXjVz0R9kXNh
/yRZMWuqkxME+w45P5hAICG8CLcifzyXo10oK/hFJR5ZLnimDJd2EQ8cS1Za0XI2
rPvlUFNA0k4v9sxDiDNW/flaN2V/N6HRrTIN22FUaeA0DffZEN+0uUkQYQv1wtBn
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12177388855250168443175275445396258872
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'poc-canopee-arcgisserverx.hp.m-ve.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20984891008634590100710775336407083046846097124822411454532290023063021558538596201542139262349959886754749621249678167546231945783357966565290099529359272654434462118482033118778179349824534472555321625419965404373033844705919053070229172698690180623372380723628938006185468478854596483747188603033368391855332328340584086581368791393689283946085428274818929049096837406416308391616584640327024276702561662681304889197093377418282724766591453796871355077779386399269758449523205544385840913223941681778379507934651960198082003213885437881624307729848273075098712033766994935190384927955088289161373889223967061862389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fd3ee3345b92c67abecc916d0c4ba57ec7146fca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poc-canopee-arcgisserverx.hp.m-ve.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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