locations.bankofoklahoma.com

- BOK Financial Corporation -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number c9:ea:de:db:13:cd:5a:a0:70:2c:93:0f:5c:a0 was issued on by Entrust, Inc..

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BOK Financial Corporation

Organization: BOK Financial Corporation
State / Province: Oklahoma
Locality: Tulsa
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): c9:ea:de:db:13:cd:5a:a0:70:2c:93:0f:5c:a0
Serial Number (int): 4095372690882771520471763107404960
Serial Number lenght: 112 bits, 14 octets

SubjectKeyId: 82:82:05:8c:a5:80:1d:12:ce:76:04:f6:d2:b4:4e:e3:16:fd:17:c9
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): ad:b4:a9:e8:4e:bd:aa:d0:de:7e:61:5a:b4:2d:6f:ae:a0:31:45:b7
Fingerprint (sha256): 34:fc:fa:e7:cd:3b:4a:51:8b:b0:e4:12:57:e4:bf:74:87:99:58:65:61:10:63:95:6a:52:0f:d8:83:74:2a:d7

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate locations.bankofoklahoma.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for locations.bankofoklahoma.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

locations.bankofoklahoma.com
locations.bokfinancial.com
locations.bankofalbuquerque.com
locations.bankofarizona.com
locations.bankofarkansas.com
locations.bankoftexas.com
locations.csbt.com
locations.mobank.com

Other certificates including the domain name bankofoklahoma.com

(limited to 100 certificates)
homenow-d.bokf.com
onlinebanking.bokfinancial.com
onlinebanking.bankofoklahoma.com
openaccount.bokfinancial.com
onlinebanking.bokfinancial.com
onlinebanking.bokfinancial.com
homenow-t.bokf.com
www.bokfinancial.com
response.bankofoklahoma.com
homenow.bokf.com
homenow-t.bokf.com
response.bankofoklahoma.com
response.bankofoklahoma.com
locations.bankofoklahoma.com
homenow-t.bokf.com
homenow.bokf.com
loans.bankofoklahoma.com
homenow-mqa.bokf.com
openaccount.bankofoklahoma.com
loans.bankofoklahoma.com
onlinebanking.bokfinancial.com
www.bankofoklahoma.com
www.bankofoklahoma.com
www.bankofoklahoma.com
homenow-d.bokf.com
www.bokfinancial.com
homenow.bokf.com
homenow-t.bokf.com
www.bokfinancial.com
locations.bankofoklahoma.com
es.bankofoklahoma.com
www.bokfinancial.com
ila.bankofoklahoma.com
bok-qa.roostify.com
response.bankofoklahoma.com
onlinebanking.bokfinancial.com
openaccount.bokfinancial.com
onlinebanking.bankofoklahoma.com
demosource.bokf.com
response.bankofoklahoma.com
www.bokfinancial.com
www.bankofoklahoma.com
locations.bankofoklahoma.com
tracking.bankofoklahoma.com
response.bankofoklahoma.com
locations.bankofoklahoma.com
homenow.bokf.com
response.bankofoklahoma.com
locations.bankofoklahoma.com
ila.bankofoklahoma.com
homenow-d.bokf.com
onlinebanking.bokfinancial.com
www.bokfinancial.com
onlinebanking.bankofoklahoma.com
onlinebanking.bankofoklahoma.com
openaccount.bankofoklahoma.com
bok-qa.roostify.com
onlinebanking.bankofoklahoma.com
homenow.bokf.com
homenow-t.bokf.com
homenow-t.bokf.com
ila.bankofoklahoma.com
es.bankofoklahoma.com
bok-qa.roostify.com
es.bankofalbuquerque.com
tracking.bankofoklahoma.com
www.bankofoklahoma.com
onlinebanking.bokfinancial.com
openaccount.bankofoklahoma.com
loans.bankofoklahoma.com
es.bankofalbuquerque.com
www.bokfinancial.com
bok-qa.roostify.com
www.bankofoklahoma.com
loans.bankofoklahoma.com
mortgage-d.bokf.com
m.bankofoklahoma.com
www.bokfinancial.com
ila.bankofoklahoma.com
onlinebanking.bankofoklahoma.com
es.bankofoklahoma.com
homenow.bokf.com
es.bokfinancial.com
sitecore.bokfinancial.com
es.bokfinancial.com
homenow.bokf.com
homenow-mqa.bokf.com
bok-qa.roostify.com
openaccount.bokfinancial.com
onlinebanking.bokfinancial.com
locations.bokfinancial.com
www.bokfinancial.com
www.bankofoklahoma.com
www.bankofoklahoma.com
locations.bokfinancial.com
ila.bankofoklahoma.com
onlinebanking.bankofoklahoma.com
homenow.bokf.com
onlinebanking.bokfinancial.com
onlinebanking.bankofoklahoma.com

Certificate

The complete raw certificate details for locations.bankofoklahoma.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfouGYWhhMvw74eV2iOr
mnhTRupPwh50ZK+V5qWev7e1Vtucg7yUvP3+NIpf8uZJazSTU/ECBu0z3eGTXh0F
dekz5Q05VBvGZrgNkBihftUnO8Tko5M67obSqceFxiv8ntbMFKhyxQ9tISLPru6B
OAOk/fGITGi2AT6eIsHH2BqQfP742lTGg8YmAzJZsHIV7mZW7uZII7Nm0XZiE0t0
vHVqcUkdZmkWs7/tILoOjWT9SRJ3WoKyzCtHQvGdlOXcIu/xb0zvb2lbU8NaUBXy
+rcbYDOaHneZo6ghv8Y81FwoqoDZkDc+8nxok00IdIwoMIAz3/Aln1Wjby84vvjt
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4095372690882771520471763107404960
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-26 22:46:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 22:46:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oklahoma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tulsa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BOK Financial Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'locations.bankofoklahoma.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24487361252388849581284337807844332445212364581245408340528430130904363812814227398075227895162846402294422709045812860005516688502594013955952509474504852279750622884878669326446924587316476390229198505422377741423316168184828228005298732895099677478261380944785651249962433403329749364507081186551542216619419180329526743953497876822108095087973135174619618593212590190020673036600508309907930890740593848894743250271373830526237729511565569286521450550037339764814370802495560948227378128653894358581470977792661833295258431891759862311883018580411963825971941558271978009663874967492129824262193468909400704478621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8282058ca5801d12ce7604f6d2b44ee316fd17c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (222 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.bankofoklahoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.bokfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.bankofalbuquerque.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.bankofarizona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.bankofarkansas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.bankoftexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.csbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.mobank.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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