www.nixchallenge.nl
Issued by Amazon
About this certificate
This digital certificate with serial number 03:b4:93:40:75:b8:90:6c:25:0d:a2:0c:62:aa:0e:83 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.nixchallenge.nl
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b4:93:40:75:b8:90:6c:25:0d:a2:0c:62:aa:0e:83Serial Number (int): 4925284043138024815915163079519374979
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: fa:1a:d4:c3:9d:f6:bb:a9:43:36:92:d9:3e:9b:20:5e:31:3e:eb:6f
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): ed:28:8c:1e:ad:69:1b:d6:dc:f2:5f:dd:c8:a9:df:63:aa:e3:fc:05
Fingerprint (sha256): 35:a8:e0:79:61:25:1d:11:47:35:99:57:7c:5a:9b:84:64:66:96:60:86:60:d8:f8:f8:dc:cb:a0:65:8c:a5:37
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate www.nixchallenge.nl
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.nixchallenge.nl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.nixchallenge.nl
Other certificates including the domain name nixchallenge.nl
(limited to 100 certificates)
lokals.co.uk
digitalgoose.io
link.eco99-prod.moveodevelop.com
suludev.corp-internal.rxo.com
www.preguntaz.com
www.countingdowntocoble.com
schnelltest.care
01010000.tech
redthemes.net
mutcho.app
gaplite.redsos.com.ar
www.quehry.com
events-september-2022.amfa.net.au
www.nixchallenge.nl
nixchallenge.nl
www.federicofumo.com
premiocapitolium-roma.it
rustfish.com
www.gotakeout.ca
www.findhamza.xyz
firebase.hendrasaputra.com
www.federicofumo.com
inh-elgrancatire.elinmejorable.com
www.naoztd.com
e-learning.nixchallenge.nl
livego-stg.vonder.io
www.stissingtheatreguild.org
www.nixchallenge.nl
biotechhoney.com
dranna.takeaction.co
www.naoztd.com
beta.motormerchants.com.au
badassxxx.com
badassxxx.com
biotechhoney.com
blog.wharfstreetstudios.com
nixchallenge.nl
www.findhamza.xyz
gall-gall-finale.nixchallenge.nl
ozturkmakina.com.tr
liberty-live.anevent.co.za
moku-jp.com
www.oakwavephotography.com
comptametrics.com
subscription.timeyrd.com
www.quehry.com
lemonbox.nl
new.eestec.ro
www.nixchallenge.nl
e-learning.nixchallenge.nl
www.carvalhoneves.com.br
cgc.maresto.id
api.nixchallenge.nl
short.mimic.eu.org
ovellocapital.com
www.hellovia.id
link.eco99-prod.moveodevelop.com
hillcharts.speedledger.net
www.honest.poker
naoto.bando.page
hub.veamstudios.com
info.2cl.com.br
www.lighthousetowels.com
admin.golfinity-app.com
inh-creamburguer.elinmejorable.com
eymir.zeplinx.com
www.jesplumbing.com
products.candbdev.com
vestedinterest.app
vishalsingh.xyz
yadidi.donyaplatform.com
links.selectcitywalk.com
nicolatiani.com
bombayspice.com.au
admin.ppdb.edutech.web.id
ayaandhir.com
www.nixchallenge.nl
hello.glmachado.com
windupmusic.ca
comptametrics.com
www.jamieson.app
s-kino.cedricmeyer.eu
mgemipartner.com
www.countingdowntocoble.com
antiguacatcafe.com
www.nixchallenge.nl
www.epsmachineindia.com
hillcharts.speedledger.net
www.nixchallenge.nl
www.nixchallenge.nl
sandy.chabbaman.com
falcodev.com.br
www.hellovia.id
www.jamieson.app
digitalgoose.io
link.eco99-prod.moveodevelop.com
suludev.corp-internal.rxo.com
www.preguntaz.com
www.countingdowntocoble.com
schnelltest.care
01010000.tech
redthemes.net
mutcho.app
gaplite.redsos.com.ar
www.quehry.com
events-september-2022.amfa.net.au
www.nixchallenge.nl
nixchallenge.nl
www.federicofumo.com
premiocapitolium-roma.it
rustfish.com
www.gotakeout.ca
www.findhamza.xyz
firebase.hendrasaputra.com
www.federicofumo.com
inh-elgrancatire.elinmejorable.com
www.naoztd.com
e-learning.nixchallenge.nl
livego-stg.vonder.io
www.stissingtheatreguild.org
www.nixchallenge.nl
biotechhoney.com
dranna.takeaction.co
www.naoztd.com
beta.motormerchants.com.au
badassxxx.com
badassxxx.com
biotechhoney.com
blog.wharfstreetstudios.com
nixchallenge.nl
www.findhamza.xyz
gall-gall-finale.nixchallenge.nl
ozturkmakina.com.tr
liberty-live.anevent.co.za
moku-jp.com
www.oakwavephotography.com
comptametrics.com
subscription.timeyrd.com
www.quehry.com
lemonbox.nl
new.eestec.ro
www.nixchallenge.nl
e-learning.nixchallenge.nl
www.carvalhoneves.com.br
cgc.maresto.id
api.nixchallenge.nl
short.mimic.eu.org
ovellocapital.com
www.hellovia.id
link.eco99-prod.moveodevelop.com
hillcharts.speedledger.net
www.honest.poker
naoto.bando.page
hub.veamstudios.com
info.2cl.com.br
www.lighthousetowels.com
admin.golfinity-app.com
inh-creamburguer.elinmejorable.com
eymir.zeplinx.com
www.jesplumbing.com
products.candbdev.com
vestedinterest.app
vishalsingh.xyz
yadidi.donyaplatform.com
links.selectcitywalk.com
nicolatiani.com
bombayspice.com.au
admin.ppdb.edutech.web.id
ayaandhir.com
www.nixchallenge.nl
hello.glmachado.com
windupmusic.ca
comptametrics.com
www.jamieson.app
s-kino.cedricmeyer.eu
mgemipartner.com
www.countingdowntocoble.com
antiguacatcafe.com
www.nixchallenge.nl
www.epsmachineindia.com
hillcharts.speedledger.net
www.nixchallenge.nl
www.nixchallenge.nl
sandy.chabbaman.com
falcodev.com.br
www.hellovia.id
www.jamieson.app
Certificate
The complete raw certificate details for www.nixchallenge.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEfDCCA2SgAwIBAgIQA7STQHW4kGwlDaIMYqoOgzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA1MjAwMDAwMDBaFw0yMDA2MjAx MjAwMDBaMB4xHDAaBgNVBAMTE3d3dy5uaXhjaGFsbGVuZ2UubmwwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDmid9EnJwHWWdX9mfHFPx01qFgigO8+lQ A8vOPaIcVKyNgH10KVkVniswr2lwPvRWbDLSjAjIWl0MCM300HoBWKwRKWG+MpiL Oy7ubQNcxYcyZSQvQqT8xvVp9AqA5IzD+dXo5BvjSmfdOaTMHAxSIA4p1YcFhbPB bPB30i7DKgoa+Sp34TRMDYRV7h5qkLMLTY48DbABdgVoEREb219bG1f4bSqBth6a FwTFqb9SDurwWDh56H2iOaBr1N3091fDEFjnhdDp3f4BeGqsgCR8SWBCbqr3ko7e rsjL+fe+7J6UfhJGtfeUUQD9OCm1G2BQnUt7UPmluGDIGkbrvdUNAgMBAAGjggGM MIIBiDAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQU +hrUw532u6lDNpLZPpsgXjE+628wHgYDVR0RBBcwFYITd3d3Lm5peGNoYWxsZW5n ZS5ubDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1 c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwB AgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2Ex Yi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIu YW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB 1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBAbf1EYni4sHIQlaDin7DB C8q74/DN4sHjB6D84BMdU6rGV33N4t3TakcxgAfuPjF1nsOBgNBeQpxhlJHW4ks0 H3wwGgGPBJDXr35pU4JXpT4Ib++D2AagouBbExSEAaDHQpzXUssopDslyeHS1nTl U3xDImL50cO2Z4bNZBUDhxdlmU3yCUJPtOh9oannFS+DxnX0hFhKR9W5sE2QM5OW N9c9jlHw6Ph0uPNe3Hq7lFX/L7t4NFpi/JuHF8DuQjvT4d9HTJZJmO/yx0he69a4 zZ5qd8rmJRnw3x+oD4GnD0kXj4yMhWDjKseCy5xwkwvn+Jz1Kkj9AFtNLOIjFTU1 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5onfRJycB1lnV/ZnxxT 8dNahYIoDvPpUAPLzj2iHFSsjYB9dClZFZ4rMK9pcD70Vmwy0owIyFpdDAjN9NB6 AVisESlhvjKYizsu7m0DXMWHMmUkL0Kk/Mb1afQKgOSMw/nV6OQb40pn3TmkzBwM UiAOKdWHBYWzwWzwd9IuwyoKGvkqd+E0TA2EVe4eapCzC02OPA2wAXYFaBERG9tf WxtX+G0qgbYemhcExam/Ug7q8Fg4eeh9ojmga9Td9PdXwxBY54XQ6d3+AXhqrIAk fElgQm6q95KO3q7Iy/n3vuyelH4SRrX3lFEA/TgptRtgUJ1Le1D5pbhgyBpG673V DQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4925284043138024815915163079519374979 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-20 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nixchallenge.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24692485763306455448251044705796180103582015154594457108191237364058777622629389878013464749105400651005904557620707038911563616856923982539932430447110226258249440610658892733780149357316015217206317280122058133917093862155707080497025679454364875332253091926700509278043708288124247749502976882028949456945137000021615182751802168175116688327616415882280119339386058518135635509607583210070192113782383759597400910065401919365053526569413379760649074819743243719278582173577008689680064838208931003335077769613271469032807297901882058712645550646587957258001492860234469355304834493486688666019232028614566124311821 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fa1ad4c39df6bba9433692d93e9b205e313eeb6f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nixchallenge.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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