d4.maf.ae
Issued by R3
About this certificate
This digital certificate with serial number 03:66:78:46:e0:20:e5:81:03:02:e3:30:e1:e4:af:9a:66:02 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=d4.maf.ae
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:66:78:46:e0:20:e5:81:03:02:e3:30:e1:e4:af:9a:66:02Serial Number (int): 296205534587356831007149178292468398581250
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 6b:72:83:90:8a:47:f5:b9:31:81:1e:02:e3:48:d8:b7:7c:3d:fe:60
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 59:1f:d0:ed:f9:5e:9f:03:ee:00:2c:e3:66:07:3a:2a:91:8a:52:38
Fingerprint (sha256): 34:6e:dc:5b:38:5a:99:85:40:3e:4c:86:8e:92:9c:ad:27:2d:b9:41:cd:d3:3c:ee:e5:76:94:5d:9b:49:7c:4c
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate d4.maf.ae
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for d4.maf.ae
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
d4.maf.ae
Other certificates including the domain name maf.ae
(limited to 100 certificates)
*.dev.grid2.maf.ae
snowabudhabi-aut.maf.ae
api-share-dev.maf.ae
that.majidalfuttaim.com
*.cvm.maf.ae
d4-aut.maf.ae
www.majidalfuttaim.com
mportal-stg.maf.ae
*.grid2.maf.ae
mportal.maf.ae
ssl385337.cloudflaressl.com
*.maf.ae
mdm-api.dev.grid2.maf.ae
that.majidalfuttaim.com
mesa4.aylsoluciones.pw
smbu-api.maf.ae
www.majidalfuttaim.com
maf.ae
*.dev.grid2.maf.ae
api-share-sandbox.maf.ae
snowoman-preprod.maf.ae
that.majidalfuttaim.com
snowoman-preprod.maf.ae
that.majidalfuttaim.com
snowabudhabi-preprod.maf.ae
itsupport.pando.ai
that.majidalfuttaim.com
that.majidalfuttaim.com
snowoman-stg.maf.ae
that.majidalfuttaim.com
uniforms.maf.ae
ssl385338.cloudflaressl.com
that.majidalfuttaim.com
www.majidalfuttaim.com
www.majidalfuttaim.com
*.dla.maf.ae
*.dev.grid2.maf.ae
mafsdp.maf.ae
d4.maf.ae
mportal.maf.ae
that.majidalfuttaim.com
maf.ae
api-holding-dev.maf.ae
servicedesk.oneontacsd.org
www.majidalfuttaim.com
sharecmsheadless-auth.maf.ae
maf.ae
uniforms-auth.maf.ae
api-share-internal-fab-uat.maf.ae
sfsharerewards-stg.maf.ae
sharecmsheadless.maf.ae
maf.ae
*.governance.maf.ae
www.majidalfuttaim.com
www.majidalfuttaim.com
helpdesk.admix.com
*.maf.ae
snowabudhabi.maf.ae
www.validationportal.maf.ae
uniforms-auth.maf.ae
helpdesk.dpsgroupglobal.com
maf.ae
snowabudhabi-preprod.maf.ae
that.majidalfuttaim.com
uniforms-auth.maf.ae
api-share-prod.maf.ae
mportal-auth.maf.ae
*.maf.ae
snowabudhabi.maf.ae
*.grid2.maf.ae
servicedesk.metro-inet.us
snowoman-stg.maf.ae
lecitsupport.maf.ae
that.majidalfuttaim.com
hype.maf.ae
snowoman-aut.maf.ae
that.majidalfuttaim.com
d4-stg.maf.ae
sharecmsheadless-stg.maf.ae
snowabudhabi-preprod.maf.ae
ssl385338.cloudflaressl.com
snowabudhabi-preprod.maf.ae
snowabudhabi-aut.maf.ae
maf.ae
uniforms-auth.maf.ae
maf.ae
api-ventures-prod.maf.ae
*.maf.ae
that.majidalfuttaim.com
d4.maf.ae
snowoman-aut.maf.ae
www.majidalfuttaim.com
destek.coreway.com.tr
receiptworx.maf.ae
that.majidalfuttaim.com
uniforms-stg.maf.ae
that.majidalfuttaim.com
www.majidalfuttaim.com
api-share-internal-fab-dev.maf.ae
www.majidalfuttaim.com
snowabudhabi-aut.maf.ae
api-share-dev.maf.ae
that.majidalfuttaim.com
*.cvm.maf.ae
d4-aut.maf.ae
www.majidalfuttaim.com
mportal-stg.maf.ae
*.grid2.maf.ae
mportal.maf.ae
ssl385337.cloudflaressl.com
*.maf.ae
mdm-api.dev.grid2.maf.ae
that.majidalfuttaim.com
mesa4.aylsoluciones.pw
smbu-api.maf.ae
www.majidalfuttaim.com
maf.ae
*.dev.grid2.maf.ae
api-share-sandbox.maf.ae
snowoman-preprod.maf.ae
that.majidalfuttaim.com
snowoman-preprod.maf.ae
that.majidalfuttaim.com
snowabudhabi-preprod.maf.ae
itsupport.pando.ai
that.majidalfuttaim.com
that.majidalfuttaim.com
snowoman-stg.maf.ae
that.majidalfuttaim.com
uniforms.maf.ae
ssl385338.cloudflaressl.com
that.majidalfuttaim.com
www.majidalfuttaim.com
www.majidalfuttaim.com
*.dla.maf.ae
*.dev.grid2.maf.ae
mafsdp.maf.ae
d4.maf.ae
mportal.maf.ae
that.majidalfuttaim.com
maf.ae
api-holding-dev.maf.ae
servicedesk.oneontacsd.org
www.majidalfuttaim.com
sharecmsheadless-auth.maf.ae
maf.ae
uniforms-auth.maf.ae
api-share-internal-fab-uat.maf.ae
sfsharerewards-stg.maf.ae
sharecmsheadless.maf.ae
maf.ae
*.governance.maf.ae
www.majidalfuttaim.com
www.majidalfuttaim.com
helpdesk.admix.com
*.maf.ae
snowabudhabi.maf.ae
www.validationportal.maf.ae
uniforms-auth.maf.ae
helpdesk.dpsgroupglobal.com
maf.ae
snowabudhabi-preprod.maf.ae
that.majidalfuttaim.com
uniforms-auth.maf.ae
api-share-prod.maf.ae
mportal-auth.maf.ae
*.maf.ae
snowabudhabi.maf.ae
*.grid2.maf.ae
servicedesk.metro-inet.us
snowoman-stg.maf.ae
lecitsupport.maf.ae
that.majidalfuttaim.com
hype.maf.ae
snowoman-aut.maf.ae
that.majidalfuttaim.com
d4-stg.maf.ae
sharecmsheadless-stg.maf.ae
snowabudhabi-preprod.maf.ae
ssl385338.cloudflaressl.com
snowabudhabi-preprod.maf.ae
snowabudhabi-aut.maf.ae
maf.ae
uniforms-auth.maf.ae
maf.ae
api-ventures-prod.maf.ae
*.maf.ae
that.majidalfuttaim.com
d4.maf.ae
snowoman-aut.maf.ae
www.majidalfuttaim.com
destek.coreway.com.tr
receiptworx.maf.ae
that.majidalfuttaim.com
uniforms-stg.maf.ae
that.majidalfuttaim.com
www.majidalfuttaim.com
api-share-internal-fab-dev.maf.ae
www.majidalfuttaim.com
Certificate
The complete raw certificate details for d4.maf.ae in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEJTCCAw2gAwIBAgISA2Z4RuAg5YEDAuMw4eSvmmYCMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA4MDIwNjUzMDBaFw0yMjEwMzEwNjUyNTlaMBQxEjAQBgNVBAMT CWQ0Lm1hZi5hZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN04Gjem GuEeMofb9lyeB6v18gcjqZuIf5hDKK6Xlc4VC/VEbEYZg5X+Bc3S3dt/ufnJQFQU +UY9mIZq4RpwNhMAywlZm/cAUM3u7LeE9nJaVW3LkOFsiIK6ASTMX4eC78XzqjLf XbAOwOwMoEukUGkmxOwW60C9S5fYvGa6dBQsq2Td19hTQEaIQAZE2N4drvIVvc5G +05/HEt9xLwhjHkQ/m2uFAcQe1CcBu/Tt1QqHKst7qPpI7hxR8WNAQlyAu2CQ/tW +l9EJVBOOzmK1GBGTrxxF7C3GjCbqYkCv2ZZmhjyawv260y2Z9XjFM9BHTqjMqYo C4NSc8f9k8cFI2MCAwEAAaOCAVEwggFNMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU a3KDkIpH9bkxgR4C40jYt3w9/mAwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wFAYD VR0RBA0wC4IJZDQubWFmLmFlMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAF2xbpS3CE OsGjv8/EjFRo51TZzJHgojm64hQ5R8gf8vdbqkFImYChvsGutINhO5XvVni/TlRe 9+LbUuqvMszc0PhHD3+86VbdzekHD2lPkVhTgiVdwsZersKWvplYunDvkl1QmXl4 XDbnV9G/BbW6+8N1oBYuqpurcRuSAxtWV5pPYUC7rYxdgaxH+FztoQQIEgydRvPN 0wLnLbXfQzvkzxju/ysclhblkzXUSASD68nzlLxY/GZxjUAr2nuw8kegK8bPN/KA YhM9GaCdGrXMZjdXheDdmGferzRV39m9T+qHeIUGjowjX8jsrb4DBKoRDeKJDgAX R06XFWSQv/73 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TgaN6Ya4R4yh9v2XJ4H q/XyByOpm4h/mEMorpeVzhUL9URsRhmDlf4FzdLd23+5+clAVBT5Rj2YhmrhGnA2 EwDLCVmb9wBQze7st4T2clpVbcuQ4WyIgroBJMxfh4LvxfOqMt9dsA7A7AygS6RQ aSbE7BbrQL1Ll9i8Zrp0FCyrZN3X2FNARohABkTY3h2u8hW9zkb7Tn8cS33EvCGM eRD+ba4UBxB7UJwG79O3VCocqy3uo+kjuHFHxY0BCXIC7YJD+1b6X0QlUE47OYrU YEZOvHEXsLcaMJupiQK/ZlmaGPJrC/brTLZn1eMUz0EdOqMypigLg1Jzx/2TxwUj YwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 296205534587356831007149178292468398581250 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-02 06:53:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-31 06:52:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'd4.maf.ae' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27926330527769220200931823112274008115179111572839895580879474732297753662959538266170453950673583761824551972734710401537934047062354851918704871371135160569289460744522485029923129379826761124975259148286019022441339969879214105383190543809689004985636268974138357309843186204513640202939230359702625794773884124791983890765876444208718118605073583040679529218834673852074897808602243366221011019277528110419674632306079091192315675037046248282334222522252209015282889589308525279505513645110801140979991468695558883783694348019442996976305103240722408258929088059307796018702086062424020730098997593992484188660579 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6b7283908a47f5b931811e02e348d8b77c3dfe60 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd4.maf.ae' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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