portal.caldera21.com
Issued by RapidSSL SHA256 CA
About this certificate
This digital certificate with serial number 0c:8d:3f:da:e6:3c:c9:3a:db:f3:3b:33:bf:ca:bf:9f was issued on by GeoTrust Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=portal.caldera21.com
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:8d:3f:da:e6:3c:c9:3a:db:f3:3b:33:bf:ca:bf:9fSerial Number (int): 16684144941271897424840322013314334623
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f
Fingerprint (sha1): 21:d5:f4:d6:a1:c2:a5:de:73:d0:4b:f2:7d:df:8c:dc:cb:bd:96:f8
Fingerprint (sha256): 3b:da:6e:7b:80:28:e7:d8:a6:29:68:72:13:e5:55:be:13:38:26:ca:ce:f6:9c:26:c4:1b:0a:6d:61:cf:42:cc
Issuing Certificate URL: http://gp.symcb.com/gp.crt
Revocation information
OCSP Server: http://gp.symcd.comCRL Distribution Point: http://gp.symcb.com/gp.crl
Check the revocation status for certificate portal.caldera21.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for portal.caldera21.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
portal.caldera21.com
Other certificates including the domain name caldera21.com
(limited to 100 certificates)
caldera21.com
dev.caldera21.com
dev.caldera21.com
helpdesk.compti.co.ao
caldera21.com
dev.caldera21.com
caldera21.com
caldera21.com
*.caldera21.com
ecommerce.caldera21.com
caldera21.com
portal.caldera21.com
dev.caldera21.com
*.caldera21.com
caldera21.com
support.bringpro.com
support.ospreymeasurement.com
caldera21.com
ecommerce.caldera21.com
caldera21.com
caldera21.com
dev.caldera21.com
*.caldera21.com
portal.caldera21.com
caldera21.com
caldera21.com
caldera21.com
caldera21.com
dev.caldera21.com
caldera21.com
caldera21.com
caldera21.com
portal.caldera21.com
*.caldera21.com
caldera21.com
caldera21.com
ecommerce.caldera21.com
caldera21.com
portal.caldera21.com
dev.caldera21.com
caldera21.com
dev.caldera21.com
caldera21.com
ecommerce.caldera21.com
dev.caldera21.com
support.maxus.net
ecommerce.caldera21.com
caldera21.com
portal.caldera21.com
caldera21.com
dev.caldera21.com
caldera21.com
ecommerce.caldera21.com
caldera21.com
dev.caldera21.com
*.caldera21.com
dev.caldera21.com
dev.caldera21.com
ayuda.bodegadigital.biz
caldera21.com
*.caldera21.com
*.caldera21.com
dev.caldera21.com
caldera21.com
caldera21.com
caldera21.com
dev.caldera21.com
dev.caldera21.com
helpdesk.compti.co.ao
caldera21.com
dev.caldera21.com
caldera21.com
caldera21.com
*.caldera21.com
ecommerce.caldera21.com
caldera21.com
portal.caldera21.com
dev.caldera21.com
*.caldera21.com
caldera21.com
support.bringpro.com
support.ospreymeasurement.com
caldera21.com
ecommerce.caldera21.com
caldera21.com
caldera21.com
dev.caldera21.com
*.caldera21.com
portal.caldera21.com
caldera21.com
caldera21.com
caldera21.com
caldera21.com
dev.caldera21.com
caldera21.com
caldera21.com
caldera21.com
portal.caldera21.com
*.caldera21.com
caldera21.com
caldera21.com
ecommerce.caldera21.com
caldera21.com
portal.caldera21.com
dev.caldera21.com
caldera21.com
dev.caldera21.com
caldera21.com
ecommerce.caldera21.com
dev.caldera21.com
support.maxus.net
ecommerce.caldera21.com
caldera21.com
portal.caldera21.com
caldera21.com
dev.caldera21.com
caldera21.com
ecommerce.caldera21.com
caldera21.com
dev.caldera21.com
*.caldera21.com
dev.caldera21.com
dev.caldera21.com
ayuda.bodegadigital.biz
caldera21.com
*.caldera21.com
*.caldera21.com
dev.caldera21.com
caldera21.com
caldera21.com
caldera21.com
Certificate
The complete raw certificate details for portal.caldera21.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIQDI0/2uY8yTrb8zszv8q/nzANBgkqhkiG9w0BAQsFADBC MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEbMBkGA1UEAxMS UmFwaWRTU0wgU0hBMjU2IENBMB4XDTE3MDMxMzAwMDAwMFoXDTIwMDMxMjIzNTk1 OVowHzEdMBsGA1UEAwwUcG9ydGFsLmNhbGRlcmEyMS5jb20wggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQDWayeEM81iWNmSTvuhHHIDRRldVw/rGNXPnqp8 9uDIL2i6qbqViqJcCkYpp7MTmwKlrBFzEHiadp8XwZwQFOJ/mHKiAUwcI+pFF/3o j0CY81zgOb2PRAuXN4O3GCOUWHXZLwgARxrZJVBmEOKFJRlOhP9zXvNRq+qKEhRf GjN419Q/yYtcw3lDMDGF2iCcrllBk1mYHm9i8feelyRDOZyx2HR/6QFGmUwUljwg 8L5OOqy9IlFF9qhoV2uFSFtVuLhkW9D5O4EGGz3VZkhu1GLUWFkC6JkqIEd472xt ou3lI8bq/OnVYDxDktpeLDLmkKHbxYu7Ozs8f1nXabAEv9tO+zXIVhJ0YSxtX3bV 7TL4KghEbF1LcxBhogo/zZFPOTiDOq7hCWv8ePEBJ34kMAuR3+71mOFSCKyHv5hi dmvTGdtutCHkqly+9q4C+VSlfgh/3IE0ILeCEuEiZpktd1fTwHEhFk+lVkrgHCex fYUAjChhisUtHUVB7sKjbOdhzvmHNV/N63V3bkN9ur8NoeDvQFY9wdiRC1ZO0MrY egNk/eR8okj4Dndajp8OqAZu7SXk0iY/nA+cyvqDcQD5K26ZUXRxCEGMA1ABMD4U Tn6cxfDKK9ObsZuju6yXlNIrlNvaxFMnkm65lP65m7zqQWj6fQwAh1URdy78H1t+ yyYeLwIDAQABo4IBjDCCAYgwHwYDVR0RBBgwFoIUcG9ydGFsLmNhbGRlcmEyMS5j b20wCQYDVR0TBAIwADArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vZ3Auc3ltY2Iu Y29tL2dwLmNybDBvBgNVHSAEaDBmMGQGBmeBDAECATBaMCoGCCsGAQUFBwIBFh5o dHRwczovL3d3dy5yYXBpZHNzbC5jb20vbGVnYWwwLAYIKwYBBQUHAgIwIAweaHR0 cHM6Ly93d3cucmFwaWRzc2wuY29tL2xlZ2FsMB8GA1UdIwQYMBaAFJfCJ1Cewsns DIgyyHyt4qYBT9pvMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8v Z3Auc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vZ3Auc3ltY2IuY29tL2dw LmNydDATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEADcwr DtvmiRC/0tU73TzEtwZoC79HflTxfzEHLH4wIUK7tN9RhHJlUGkxiZ4fvJUnBWlu 9VT1JQBN3KXblT9parGDwUz2nr4c+xl5lrZdD+wwD81NVUMLHOL2/WOpMkeDwAQB UM8a3tQQoHq+OcPlpy0ZHOkxD89qGpvRSK5JyD/XhAsCX9Mz7XmSyezCRrXnlmLe Oxrsx0i5B/MZUEZDCXiw11CTImTv80ie0UoKi5ixrtD24lliJhosVYrUw2VeeXl+ nsOY0Y0TwXL4jySok2vxoMJG33mcQ+GeReVM6Iixw+tYJwZ7eRF/l7X4HAduP4b1 t7We9fr3lm924kU8Uw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1msnhDPNYljZkk77oRxy A0UZXVcP6xjVz56qfPbgyC9ouqm6lYqiXApGKaezE5sCpawRcxB4mnafF8GcEBTi f5hyogFMHCPqRRf96I9AmPNc4Dm9j0QLlzeDtxgjlFh12S8IAEca2SVQZhDihSUZ ToT/c17zUavqihIUXxozeNfUP8mLXMN5QzAxhdognK5ZQZNZmB5vYvH3npckQzmc sdh0f+kBRplMFJY8IPC+TjqsvSJRRfaoaFdrhUhbVbi4ZFvQ+TuBBhs91WZIbtRi 1FhZAuiZKiBHeO9sbaLt5SPG6vzp1WA8Q5LaXiwy5pCh28WLuzs7PH9Z12mwBL/b Tvs1yFYSdGEsbV921e0y+CoIRGxdS3MQYaIKP82RTzk4gzqu4Qlr/HjxASd+JDAL kd/u9ZjhUgish7+YYnZr0xnbbrQh5KpcvvauAvlUpX4If9yBNCC3ghLhImaZLXdX 08BxIRZPpVZK4BwnsX2FAIwoYYrFLR1FQe7Co2znYc75hzVfzet1d25Dfbq/DaHg 70BWPcHYkQtWTtDK2HoDZP3kfKJI+A53Wo6fDqgGbu0l5NImP5wPnMr6g3EA+Stu mVF0cQhBjANQATA+FE5+nMXwyivTm7Gbo7usl5TSK5Tb2sRTJ5JuuZT+uZu86kFo +n0MAIdVEXcu/B9bfssmHi8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16684144941271897424840322013314334623 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-12 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'portal.caldera21.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 874751454201647855185828071805086899901603231094939436371884450393371882719073784757584402452408485053603884490406795969537401816989780545090307562779831154035141105256636010135087171312400295664868276215552563317974495269144555863456792207477006732295934512259914053503649693673787724336352222770335582444828736689038032240489776549339504479959319984991607751961552328333797897647786621662640275771397573993272597199288628272154133540752026045409823666360741889340286601284684135111647648529918998529073481495718155398235767142800864046041320220148714572121637261878316070742998473573443017961187765179563712714692982014889148624508389681595942957829123044198819973189928902658866226602001990938103907413774384191895843575420202630798620658599993539429588582994211672855787741390398313482420444520585027615648841068395848606183042234216832560744211312675973984475550168356495963508869231286683997308849017593161796177388980970550658252195534835964789921902544236056809897546106397147384895344797528267713954442361171734794545122499696322228046400522170440700233201326399425319111484969520957373803683471919610974494446585748419325677225949322869294032289040030476161302840970504447331893265482689537320039808193110035194244197916207 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.caldera21.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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