usirmkexch01.endologix.com

- Endologix LLC -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 07:dd:7f:34:30:dd:53:7f:ae:93:ff:2c:b8:0d:95:a6 was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Endologix LLC

Organization: Endologix LLC
State / Province: California
Locality: Irvine
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:dd:7f:34:30:dd:53:7f:ae:93:ff:2c:b8:0d:95:a6
Serial Number (int): 10454673577237569909414935915691611558
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 71:17:e5:08:39:3e:77:37:58:50:cd:a8:b7:d2:ca:3d:0f:55:9e:30
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 54:8a:09:e5:f8:30:b4:29:6e:f8:69:52:4f:7b:63:93:66:fb:ba:2b
Fingerprint (sha256): 35:c7:de:7f:5c:ea:4a:31:85:78:b8:dd:c5:ac:5e:cd:c0:b0:e1:03:09:24:06:dd:fa:ca:00:19:70:65:89:07

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate usirmkexch01.endologix.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for usirmkexch01.endologix.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

usirmkexch01.endologix.com
*.endologix.com
endologix.com
autodiscover.endologix.com
mail.endologix.com
hybrid.endologix.com

Other certificates including the domain name endologix.com

(limited to 100 certificates)
ithelpdesk.endologix.com
5707090131681280-fe3.pantheonsite.io
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-36.gcs-web.com
5688555066097664-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
leapfrog-ssl-36.gcs-web.com
wifiguest.endologix.com
leapfrog-ssl-36.gcs-web.com
us2.endologix.com
exchange02.endologix.com
leapfrog-ssl-36.gcs-web.com
endologix.com
eu1.endologix.com
leapfrog-ssl-36.gcs-web.com
ithelpdesk.endologix.com
5688555066097664-fe3.pantheonsite.io
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-36.gcs-web.com
5707090131681280-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
ithelpdesk.endologix.com
salesforce.endologix.com
5707090131681280-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
us4.endologix.com
5707090131681280-fe3.pantheonsite.io
ithelpdesk.endologix.com
endologix.com
5707090131681280-fe3.pantheonsite.io
leapfrog-ssl-36.gcs-web.com
5707090131681280-fe3.pantheonsite.io
ithelpdesk.endologix.com
us3.endologix.com
leapfrog-ssl-36.gcs-web.com
5707090131681280-fe3.pantheonsite.io
*.endologix.com
leapfrog-ssl-36.gcs-web.com
5694979263430656-fe3.pantheonsite.io
usirmkexch01.endologix.com
leapfrog-ssl-36.gcs-web.com
5688555066097664-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
endologix.com
leapfrog-ssl-36.gcs-web.com
5707090131681280-fe3.pantheonsite.io
endologix.com
5707090131681280-fe3.pantheonsite.io
helpdesk.dpsgroupglobal.com
leapfrog-ssl-36.gcs-web.com
ithelpdesk.endologix.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-36.gcs-web.com
5707090131681280-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
leapfrog-ssl-36.gcs-web.com
5707090131681280-fe3.pantheonsite.io
leapfrog-ssl-36.gcs-web.com
5688555066097664-fe3.pantheonsite.io
mail.endologix.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-36.gcs-web.com
5707090131681280-fe3.pantheonsite.io
ithelpdesk.endologix.com
leapfrog-ssl-36.gcs-web.com
5688555066097664-fe3.pantheonsite.io
*.endologix.com
mail.endologix.com
5707090131681280-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
ithelpdesk.endologix.com
ithelpdesk.endologix.com
5707090131681280-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
marketing.endologix.com
leapfrog-ssl-36.gcs-web.com
5688555066097664-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
leapfrog-ssl-36.gcs-web.com
5688555066097664-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
leapfrog-ssl-36.gcs-web.com
LyncWebExt.endologix.com
endologix.com
5707090131681280-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io

Certificate

The complete raw certificate details for usirmkexch01.endologix.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg0uCHu6dE5fOz87vozu
BCh5ek7wQtsxlxnXDXgl5rfXBN9VCJ+826B8+bRsRBrp6A9dhlZuWjOs77AYiHQ3
Odr2UGoVL6CbhxmCAWiBI8x0XxWbwvWvTVttoIuDZpigDnwpKM1URe8deA7QCZMb
2GKVlLhgNoXQE34tPMhpDSIxRurWydD9fkESJjo0AblvW9jrU1tgoiRUcYg/M9v9
0hNkQzHuJvH9b9vs5BvRVnDetPG9qGLwMDH1zDi0OMH4HUdA5C63yLIiZkZatb50
gVrpgTVoCMZgvLEwCfkXktTwNTVXgOn4IOQryFUxoZBagaBsGsqeF0pXiPdSU73T
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10454673577237569909414935915691611558
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Irvine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Endologix LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'usirmkexch01.endologix.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19447198174737527309525565419396054815150795779211948644756437242144774059311248723436526152050541392152188735629610242382637774040910826257275912652289302121803300090845860389142862057831728131886741935065096590192418477732287015525455304611440075427141293105939535554103088351666964294257607049659971736103308685502724573286258257552191989689087517199546166713396189731240477148670931774073842104285665691226481093413657715550925975283808402740758357346393945192460665691001958662375058917684729201677468812801337518396551897428472986001351036538950987916558173284031252250104358842517214667479915685117325249205037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7117e508393e77375850cda8b7d2ca3d0f559e30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usirmkexch01.endologix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.endologix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endologix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.endologix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.endologix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hybrid.endologix.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00af271f08b4fb87e2de9116b91d5095663241749643b557bae31fc8509c80c6c5580b9031bbe4b23f764c666185696e94013b4a0212fbda179dc40ef15f0660c45192f23456b364c1993871f434a1be2be6b0cc87c8799b4a82a4e4b7845316606fca7209fee0dd9defb9513e25cf2f4684d13e96f2a2e30545bfbf82a517469245390d7af509f0bb255fc8546e71e6ba806001e16f099e66eb9788a11f53e7ca5e3a86631e0851ef4988e2e22d81993364fd66e5a26e9a4266b5abf50c602212c53b1b24f5ecc22c81f2d74d16661d24609ba3f7d1cfd367a659e6b12ab8d92230b181cc9e9c4734fea795515357f08d2cc3d060239122aebe2b19a352f55a92