api.canary.ricohspaces.app
Issued by GTS CA 1D2
About this certificate
This digital certificate with serial number 49:dc:9e:53:69:de:fc:89:0a:00:00:00:00:7c:af:e5 was issued on by Google Trust Services.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=api.canary.ricohspaces.app
Google Trust Services
Organization:
Google Trust Services
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 49:dc:9e:53:69:de:fc:89:0a:00:00:00:00:7c:af:e5Serial Number (int): 98179160230596886575595505604821299173
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 0d:90:c3:18:b2:5b:73:80:8e:85:6d:ab:4a:3d:a8:3c:a9:7e:f2:da
AuthorityKeyId: b1:dd:32:5d:e8:b7:37:72:d2:ce:5c:ce:26:fe:47:79:e2:01:08:e9
Fingerprint (sha1): 22:95:a9:23:74:b7:fd:d0:fa:3e:25:9b:e3:09:2c:96:da:7f:97:6b
Fingerprint (sha256): 38:2b:71:db:63:14:2f:8a:e1:02:22:05:3a:a1:b2:ab:6d:6e:21:58:b8:29:0d:a0:03:42:27:cc:6b:f4:0b:e4
Issuing Certificate URL: http://pki.goog/gsr2/GTS1D2.crt
Revocation information
OCSP Server: http://ocsp.pki.goog/gts1d2CRL Distribution Point: http://crl.pki.goog/GTS1D2.crl
Check the revocation status for certificate api.canary.ricohspaces.app
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api.canary.ricohspaces.app
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.canary.ricohspaces.app
Other certificates including the domain name ricohspaces.app
(limited to 100 certificates)
canary.outlook-addin.ricohspaces.app
watchers.ricohspaces.app
next.ricohspaces.app
watchers.ricohspaces.app
*.ricohspaces.app
admin.ricohspaces.app
outlook-addin.ricohspaces.app
canary.ricohspaces.app
bots.ricohspaces.app
support.ricohspaces.app
www.get.ricohspaces.app
bots.ricohspaces.app
api.ricohspaces.app
canary.admin.ricohspaces.app
theserot.com
api.canary.ricohspaces.app
canary.ricohspaces.app
api.next.ricohspaces.app
test.ricohspaces.app
test.displays.ricohspaces.app
canary.outlook-addin.ricohspaces.app
test.ricohspaces.app
supplier.thegifter.co.nz
watchers.ricohspaces.app
canary.displays.ricohspaces.app
smscapa.com
components.ricohspaces.app
ricohspaces.app
get.ricohspaces.app
api.test.ricohspaces.app
outlook-addin.ricohspaces.app
api.ricohspaces.app
surveys-graph.ricohspaces.app
www.hlavac-business.com
canary.displays.ricohspaces.app
admin.ricohspaces.app
canary.ricohspaces.app
www.get.ricohspaces.app
get.ricohspaces.app
support.ricohspaces.app
smscapa.com
api.test.ricohspaces.app
watchers.ricohspaces.app
bots.canary.ricohspaces.app
admin.ricohspaces.app
behtarlife.in
canary.ricohspaces.app
semadashboardinternalstage.talktosema.org
mandolin.com
get.ricohspaces.app
next.ricohspaces.app
bots.canary.ricohspaces.app
api.next.ricohspaces.app
support.ricohspaces.app
canary.ricohspaces.app
cors.ricohspaces.app
canary.displays.ricohspaces.app
support.ricohspaces.app
admin.ricohspaces.app
displays.ricohspaces.app
api.canary.ricohspaces.app
www.imgproductora.com
api.next.ricohspaces.app
test.displays.ricohspaces.app
www.imgproductora.com
get.ricohspaces.app
watchers.ricohspaces.app
*.ricohspaces.app
test.ricohspaces.app
test.ricohspaces.app
test.ricohspaces.app
maps.ricohspaces.app
ricohspaces.app
api.test.ricohspaces.app
api.canary.ricohspaces.app
api.canary.ricohspaces.app
test.displays.ricohspaces.app
canary.displays.ricohspaces.app
support.ricohspaces.app
bots.ricohspaces.app
surveys.ricohspaces.app
surveys.ricohspaces.app
support.ricohspaces.app
support.ricohspaces.app
ricohspaces.app
next.ricohspaces.app
cors.ricohspaces.app
canary.ricohspaces.app
outlook-addin.ricohspaces.app
get.ricohspaces.app
canary.admin.ricohspaces.app
mobilityware.12traits.com
canary.outlook-addin.ricohspaces.app
canary.ricohspaces.app
maps.ricohspaces.app
www.get.ricohspaces.app
www.get.ricohspaces.app
api.canary.ricohspaces.app
api.next.ricohspaces.app
api.canary.ricohspaces.app
watchers.ricohspaces.app
next.ricohspaces.app
watchers.ricohspaces.app
*.ricohspaces.app
admin.ricohspaces.app
outlook-addin.ricohspaces.app
canary.ricohspaces.app
bots.ricohspaces.app
support.ricohspaces.app
www.get.ricohspaces.app
bots.ricohspaces.app
api.ricohspaces.app
canary.admin.ricohspaces.app
theserot.com
api.canary.ricohspaces.app
canary.ricohspaces.app
api.next.ricohspaces.app
test.ricohspaces.app
test.displays.ricohspaces.app
canary.outlook-addin.ricohspaces.app
test.ricohspaces.app
supplier.thegifter.co.nz
watchers.ricohspaces.app
canary.displays.ricohspaces.app
smscapa.com
components.ricohspaces.app
ricohspaces.app
get.ricohspaces.app
api.test.ricohspaces.app
outlook-addin.ricohspaces.app
api.ricohspaces.app
surveys-graph.ricohspaces.app
www.hlavac-business.com
canary.displays.ricohspaces.app
admin.ricohspaces.app
canary.ricohspaces.app
www.get.ricohspaces.app
get.ricohspaces.app
support.ricohspaces.app
smscapa.com
api.test.ricohspaces.app
watchers.ricohspaces.app
bots.canary.ricohspaces.app
admin.ricohspaces.app
behtarlife.in
canary.ricohspaces.app
semadashboardinternalstage.talktosema.org
mandolin.com
get.ricohspaces.app
next.ricohspaces.app
bots.canary.ricohspaces.app
api.next.ricohspaces.app
support.ricohspaces.app
canary.ricohspaces.app
cors.ricohspaces.app
canary.displays.ricohspaces.app
support.ricohspaces.app
admin.ricohspaces.app
displays.ricohspaces.app
api.canary.ricohspaces.app
www.imgproductora.com
api.next.ricohspaces.app
test.displays.ricohspaces.app
www.imgproductora.com
get.ricohspaces.app
watchers.ricohspaces.app
*.ricohspaces.app
test.ricohspaces.app
test.ricohspaces.app
test.ricohspaces.app
maps.ricohspaces.app
ricohspaces.app
api.test.ricohspaces.app
api.canary.ricohspaces.app
api.canary.ricohspaces.app
test.displays.ricohspaces.app
canary.displays.ricohspaces.app
support.ricohspaces.app
bots.ricohspaces.app
surveys.ricohspaces.app
surveys.ricohspaces.app
support.ricohspaces.app
support.ricohspaces.app
ricohspaces.app
next.ricohspaces.app
cors.ricohspaces.app
canary.ricohspaces.app
outlook-addin.ricohspaces.app
get.ricohspaces.app
canary.admin.ricohspaces.app
mobilityware.12traits.com
canary.outlook-addin.ricohspaces.app
canary.ricohspaces.app
maps.ricohspaces.app
www.get.ricohspaces.app
www.get.ricohspaces.app
api.canary.ricohspaces.app
api.next.ricohspaces.app
api.canary.ricohspaces.app
Certificate
The complete raw certificate details for api.canary.ricohspaces.app in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEYDCCA0igAwIBAgIQSdyeU2ne/IkKAAAAAHyv5TANBgkqhkiG9w0BAQsFADBC MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZpY2VzMRMw EQYDVQQDEwpHVFMgQ0EgMUQyMB4XDTIwMTExNjE0MzYyMFoXDTIxMDIxNDE0MzYy MFowJTEjMCEGA1UEAxMaYXBpLmNhbmFyeS5yaWNvaHNwYWNlcy5hcHAwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdpnCXoyvrl5bc4n9oMrK9lnK5TtPU bKzrGn+SNBjARSH2w8GFJ5bnCSYXFnxZfIOezXZ8mwfEiPlKUQB5P0vKnsXokesl Ds2/pkyHWHXzfm3QCs7Rymvc/42eqE/TpzcRSxySAOhvre1WG7EhLvLUAxJgVr2+ zgkLPggmtIR9HDOGO5w0xtLcponkl5vcwXPUJx5OlTyavwFsF/CYUH7PF5JVY6UP MoJi1mL+Q36JmVEXRMTwUXHowL2XOrRAx5kFNi7ijChNbMrPjPhnLNHQz5u51gnu r/PERZy4EeVx/VNzZB2F+iDk8bdjczrGQ/wBL/FdNcG0qe9OVGpylHR7AgMBAAGj ggFtMIIBaTAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUDZDDGLJbc4COhW2rSj2oPKl+8towHwYDVR0j BBgwFoAUsd0yXei3N3LSzlzOJv5HeeIBCOkwZAYIKwYBBQUHAQEEWDBWMCcGCCsG AQUFBzABhhtodHRwOi8vb2NzcC5wa2kuZ29vZy9ndHMxZDIwKwYIKwYBBQUHMAKG H2h0dHA6Ly9wa2kuZ29vZy9nc3IyL0dUUzFEMi5jcnQwJQYDVR0RBB4wHIIaYXBp LmNhbmFyeS5yaWNvaHNwYWNlcy5hcHAwIQYDVR0gBBowGDAIBgZngQwBAgEwDAYK KwYBBAHWeQIFAzAvBgNVHR8EKDAmMCSgIqAghh5odHRwOi8vY3JsLnBraS5nb29n L0dUUzFEMi5jcmwwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQAD ggEBAJzdM6XqM9d4ijJIIa1t0LDCug1XOpXEKlp/Ec0Ix9YrHAyBiLvA1g4XiFK4 ENfx2ba6ngfhDp1Zdx1qFy0mxFBtma4WvWvURvDjQOro27eDTbj8s21t2Iy5nf7H XDlNbCebfWIbShCgtWCiHY7nDsWl+4DaNrgtI2fzbxmw/irXkmiz8hCwVwQXruk+ 0eV03AUgsSqZzYo+FiULBpKAJ6Hx2vov7duhUiGT08qyc4luZYXDadGhhQiwqt+d 7HUh+etKx+7o1EvdfUmzlt4Odg3x8CN06SfDk71opEK0C6llkb3tSXDQo3Md4wNE HVNYofzsMHdegq1q516rpReUdeU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aZwl6Mr65eW3OJ/aDKy vZZyuU7T1Gys6xp/kjQYwEUh9sPBhSeW5wkmFxZ8WXyDns12fJsHxIj5SlEAeT9L yp7F6JHrJQ7Nv6ZMh1h1835t0ArO0cpr3P+NnqhP06c3EUsckgDob63tVhuxIS7y 1AMSYFa9vs4JCz4IJrSEfRwzhjucNMbS3KaJ5Jeb3MFz1CceTpU8mr8BbBfwmFB+ zxeSVWOlDzKCYtZi/kN+iZlRF0TE8FFx6MC9lzq0QMeZBTYu4owoTWzKz4z4ZyzR 0M+budYJ7q/zxEWcuBHlcf1Tc2Qdhfog5PG3Y3M6xkP8AS/xXTXBtKnvTlRqcpR0 ewIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 98179160230596886575595505604821299173 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-16 14:36:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-14 14:36:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.canary.ricohspaces.app' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27980739928644848032851344002390671192659458912485234302185478869865100611753718361170239951014665976242550639315757506561724387627900408615640730296275475019978017646119023221788380232248382680034382127027503111402019443961089489213115941724436584368929312316723770255428645430596732195655840342876551484194768113232116041459289833826931980953268627705094982144312570201102841799486940138370105947972938638498108319179236058723244115727940731913436087560290588258248946936807385771893366010529806486931693466445192823285125460392605347108804555295822032604639182223221565512649057135144324241043709801430431751763067 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0d90c318b25b73808e856dab4a3da83ca97ef2da . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b1dd325de8b73772d2ce5cce26fe4779e20108e9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d2' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1D2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.canary.ricohspaces.app' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1D2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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