*.bambuser.com
Issued by Amazon
About this certificate
This digital certificate with serial number 06:18:27:3d:4c:e5:81:39:95:36:1b:fb:be:9e:4a:43 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.bambuser.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:18:27:3d:4c:e5:81:39:95:36:1b:fb:be:9e:4a:43Serial Number (int): 8100778970005101892385191040774982211
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 68:aa:65:71:04:79:d5:e8:13:af:b8:8e:03:e9:81:11:d7:57:54:4b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): de:9b:10:f8:f0:ae:38:1a:74:ce:03:a7:b1:af:af:a7:de:6f:3b:b9
Fingerprint (sha256): 3a:28:9f:6b:0a:b7:85:98:0d:b3:17:1b:b8:f2:a7:df:94:f8:66:a0:99:68:02:4f:81:1d:43:3d:38:a9:5e:ea
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.bambuser.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.bambuser.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.bambuser.com
bambuser.com
bambuser.com
Other certificates including the domain name bambuser.com
(limited to 100 certificates)
*.bambuser.com
*.bambuser.com
botterman.world
giveatip.io
cl-stage-eu.liveshopping.bambuser.com
*.bambuser.com
coact.space
eeat.app
*.bambuser.com
www.zerathon.com
www.acc.peaks.ai
*.bambuser.com
www.codigum.com
bambuser.com
alexdolphin.me
www.renovabarbershop.com
manheim-aaaw.cox2m.com
news.elmahalla.net
vanielson.xyz
*.one-to-one.bambuser.com
bambuser.com
guides.bambuser.com
bambuser.com
s2-ngnzmqi8tjyegfapbmqvyrgf.hcrimaging.xyz
*.bambuser.com
liveshopping-api.bambuser.com
bambuser.com
tallyho.cc
app-aider-ai-staging.aider.ai
mvpenthouse.com
tenne.co.jp
linoleum-public.bambuser.com
*.bambuser.com
www.coda4.com
es.linoleum.bambuser.com
guides.bambuser.com
*.bambuser.com
developers.pesepay.com
*.bambuser.com
bambuser.com
bambuser.com
merrudhe.com
bambuser.com
lsgrrd.monoestereo.com.mx
www.slweb.info
visa.hemisphere.digital
space-code-game.com
bambuser.com
*.bambuser.com
aladdinsuomi.com
3studiophotography.co.za
bambuser.com
*.liveshopping.bambuser.com
spinabac.engpa.com
mockup.dev.greenticket.io
bendayan.com.br
bambuser.com
*.bambuser.com
*.liveshopping.bambuser.com
www.munchprep.net
event.bambuser.com
labs.bambuser.com
bambuser.com
labs.bambuser.com
*.bambuser.com
iqsoftmyacceptance.com
app.hairmake-theater.com
*.bambuser.com
labs.bambuser.com
www.serglezv.com
*.one-to-one.bambuser.com
deposito.cimagrouplatam.com
canvas.dlabs.si
codexception.com
acc.vcsync.app
www.bspk.design
lcx-player.bambuser.com
*.bambuser.com
www.clotidal.com
*.liveshopping.bambuser.com
marcelloinfante.com.br
*.bambuser.com
*.liveshopping.bambuser.com
*.bambuser.com
*.bambuser.com
developers.civalgo.com
*.bambuser.com
visa.hemisphere.digital
*.bambuser.com
*.bambuser.com
armacoespalmeira.com.br
almahabaschool.com
mbabazi.co
lcx-embed.bambuser.com
*.bambuser.com
*.liveshopping.bambuser.com
*.bambuser.com
mochisquares.com
kd.scotchclub.net
www.ailogistix.com
*.bambuser.com
botterman.world
giveatip.io
cl-stage-eu.liveshopping.bambuser.com
*.bambuser.com
coact.space
eeat.app
*.bambuser.com
www.zerathon.com
www.acc.peaks.ai
*.bambuser.com
www.codigum.com
bambuser.com
alexdolphin.me
www.renovabarbershop.com
manheim-aaaw.cox2m.com
news.elmahalla.net
vanielson.xyz
*.one-to-one.bambuser.com
bambuser.com
guides.bambuser.com
bambuser.com
s2-ngnzmqi8tjyegfapbmqvyrgf.hcrimaging.xyz
*.bambuser.com
liveshopping-api.bambuser.com
bambuser.com
tallyho.cc
app-aider-ai-staging.aider.ai
mvpenthouse.com
tenne.co.jp
linoleum-public.bambuser.com
*.bambuser.com
www.coda4.com
es.linoleum.bambuser.com
guides.bambuser.com
*.bambuser.com
developers.pesepay.com
*.bambuser.com
bambuser.com
bambuser.com
merrudhe.com
bambuser.com
lsgrrd.monoestereo.com.mx
www.slweb.info
visa.hemisphere.digital
space-code-game.com
bambuser.com
*.bambuser.com
aladdinsuomi.com
3studiophotography.co.za
bambuser.com
*.liveshopping.bambuser.com
spinabac.engpa.com
mockup.dev.greenticket.io
bendayan.com.br
bambuser.com
*.bambuser.com
*.liveshopping.bambuser.com
www.munchprep.net
event.bambuser.com
labs.bambuser.com
bambuser.com
labs.bambuser.com
*.bambuser.com
iqsoftmyacceptance.com
app.hairmake-theater.com
*.bambuser.com
labs.bambuser.com
www.serglezv.com
*.one-to-one.bambuser.com
deposito.cimagrouplatam.com
canvas.dlabs.si
codexception.com
acc.vcsync.app
www.bspk.design
lcx-player.bambuser.com
*.bambuser.com
www.clotidal.com
*.liveshopping.bambuser.com
marcelloinfante.com.br
*.bambuser.com
*.liveshopping.bambuser.com
*.bambuser.com
*.bambuser.com
developers.civalgo.com
*.bambuser.com
visa.hemisphere.digital
*.bambuser.com
*.bambuser.com
armacoespalmeira.com.br
almahabaschool.com
mbabazi.co
lcx-embed.bambuser.com
*.bambuser.com
*.liveshopping.bambuser.com
*.bambuser.com
mochisquares.com
kd.scotchclub.net
www.ailogistix.com
Certificate
The complete raw certificate details for *.bambuser.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEgDCCA2igAwIBAgIQBhgnPUzlgTmVNhv7vp5KQzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTEwMTgwMDAwMDBaFw0yMDExMTgx MjAwMDBaMBkxFzAVBgNVBAMMDiouYmFtYnVzZXIuY29tMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEArkuq9lD9ONXpO+Yg3kMXH+1kqQOy8ERpz58UFvMN hNdt12DyFvGZBk/4phB/PxET+mHaSjQzf4ayMHMebGW4mm4mfZ3rq3jcu9KeTsfC TIECrJZmxD4KdQvNRAZKKnF7ZHRO14Mkc5RQZHEhX8MB4DHMDeJu00lXzzxy1+ud Tbwou3+EiGCsgnyTVswhHbnahxhC88ZUgkB16y/715v0ZTDKTKvXyeSVRSX4/6oR 5JCFovzbzKtmxS/GcYjOTT+4QYrZ4Y8PJSKGVgCtPTp9Nh/Qd5gexb3NmcWb8/98 2b1TtoJJjK+I5ZkRIf94KrGSthH9uOdL0mfey9qaryHqcwIDAQABo4IBlTCCAZEw HwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFGiqZXEE edXoE6+4jgPpgRHXV1RLMCcGA1UdEQQgMB6CDiouYmFtYnVzZXIuY29tggxiYW1i dXNlci5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpv bnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYG Z4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Au c2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNj YTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADATBgor BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqkTSqXrNID/QWLb2 zi4bssE7ulUZse9AnCfWIOWzHq2LHNX+DxaiQMQ7iIs1BRQLKVytEWgq5mKdYLu2 iEwVz/erIJ4PBPtEtC4TJYVPwxfgwpV0rzWA4xfxF9EV0wrDdX1W9asR4kAWn3K4 WV/AIpOG5bqDboNLigLGjj0atUFqxODVfuzVxHw9dEHDkglAAsWZf+gk1ahD54KN KqsN+/sUwMNeUWK+YYbZ89fU1i9md4bcSj4QgAqp+fBw8wvuKfQMATQfWkT7VVTT FwU/H6fk9HgI1NlnkMfnbIH+/9jPrvlAL4L06wmpXSZD0UpdgLyzTQGj911WfRPF DVbpGQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkuq9lD9ONXpO+Yg3kMX H+1kqQOy8ERpz58UFvMNhNdt12DyFvGZBk/4phB/PxET+mHaSjQzf4ayMHMebGW4 mm4mfZ3rq3jcu9KeTsfCTIECrJZmxD4KdQvNRAZKKnF7ZHRO14Mkc5RQZHEhX8MB 4DHMDeJu00lXzzxy1+udTbwou3+EiGCsgnyTVswhHbnahxhC88ZUgkB16y/715v0 ZTDKTKvXyeSVRSX4/6oR5JCFovzbzKtmxS/GcYjOTT+4QYrZ4Y8PJSKGVgCtPTp9 Nh/Qd5gexb3NmcWb8/982b1TtoJJjK+I5ZkRIf94KrGSthH9uOdL0mfey9qaryHq cwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8100778970005101892385191040774982211 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-18 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.bambuser.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22002778257305848349367876290803300823839555738306597668118897443572117354502693236970071940045901202450312345015640164871209913265180128335289364282455363312949140002667465480158907629418217055612628260244446734378127837000035124960618058185995133897900103769344644219498091696022287565029672998124819432282950573588519481317937380005470828003226688473424407479675539263564742361307880023872502699143705923813812703114736142606268998562689460802077491822104369991541766256378694563677560262684465394818705567837908220607479194018602483823585289562112549275249468643039209204149044845526478669524703950014286913464947 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 68aa65710479d5e813afb88e03e98111d757544b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bambuser.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bambuser.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00aa44d2a97acd203fd058b6f6ce2e1bb2c13bba5519b1ef409c27d620e5b31ead8b1cd5fe0f16a240c43b888b3505140b295cad11682ae6629d60bbb6884c15cff7ab209e0f04fb44b42e1325854fc317e0c29574af3580e317f117d115d30ac3757d56f5ab11e240169f72b8595fc0229386e5ba836e834b8a02c68e3d1ab5416ac4e0d57eecd5c47c3d7441c392094002c5997fe824d5a843e7828d2aab0dfbfb14c0c35e5162be6186d9f3d7d4d62f667786dc4a3e10800aa9f9f070f30bee29f40c01341f5a44fb5554d317053f1fa7e4f47808d4d96790c7e76c81feffd8cfaef9402f82f4eb09a95d2643d14a5d80bcb34d01a3f75d567d13c50d56e919