*.oghub.io

Issued by Amazon

About this certificate

This digital certificate with serial number 09:11:2a:c4:8f:a3:da:6f:52:62:55:c6:e7:38:63:9c was issued on by Amazon.

With 35 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.oghub.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:11:2a:c4:8f:a3:da:6f:52:62:55:c6:e7:38:63:9c
Serial Number (int): 12052188443036983934255044818424587164
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b8:ab:8b:7c:da:ed:b1:0c:a1:64:59:ad:19:95:88:cf:3c:95:e7:db
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 34:3e:d6:5d:76:09:c6:01:30:61:1f:1e:21:fb:99:1f:6a:9d:30:82
Fingerprint (sha256): 3c:8f:c4:f4:94:b0:7d:23:7f:16:34:c7:18:bf:24:e1:97:66:21:18:65:d5:29:74:5d:4c:a0:e2:e5:75:ad:f3

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.oghub.io

35

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.oghub.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.oghub.io
te.ottoversand.at
te.frankonia.com
te.jelmoli-shop.ch
te.sieh-an.ch
te.heine.de
te.quelle.ch
te.frankonia.de
te.sieh-an.de
te.frankoniamoda.ch
te.nitro-production.otto.boreus.de
te.frankonia.at
te.universal.at
te.witt-weiden.at
te.otto.de
te.quelle.de
te.baur.de
te.witt-weiden.ch
te.heine.at
te.quelle.at
te.waeschepur.de
te.witt-weiden.de
te.ambria.de
te.creation-l.de
te.heine-shop.nl
te.sportscheck.com
te.helline.fr
te.imwalking.de
te.sieh-an.at
te.ackermann.ch
te.sportscheck.ch
te.heine.ch
te.schwab.de
te.sheego.de
te.sportscheck.at

Other certificates including the domain name oghub.io

(limited to 100 certificates)
*.oghub.io
js.oghub.io
*.oghub.io
*.oghub.io
*.test-extern.oghub.io
backup.data.oghub.io
js.oghub.io
*.oghub.io
*.test-intern.oghub.io
*.oghub.io
js.oghub.io
*.test-extern.oghub.io
*.oghub.io
*.test-extern.oghub.io
*.oghub.io
backup.data.oghub.io
*.oghub.io
*.oghub.io
js.oghub.io
*.oghub.io
*.oghub.io
*.test-extern.oghub.io
backup.data.oghub.io
*.test-extern.oghub.io
*.oghub.io
js.oghub.io
js.oghub.io
js.oghub.io
js.oghub.io
js.oghub.io
js.oghub.io
*.oghub.io
*.oghub.io
js.oghub.io
*.oghub.io
js.oghub.io
test-extern.nitrosniffer.ottogroup.io
*.test-intern.oghub.io
js.oghub.io
*.oghub.io
argo-ui.usergraph.data.oghub.io
*.oghub.io
*.test-intern.oghub.io
js.oghub.io
*.test-intern.oghub.io
*.oghub.io
*.test-extern.oghub.io
*.oghub.io
prod.nitrosniffer.ottogroup.io
*.test-extern.oghub.io
js.oghub.io
js.oghub.io
js.oghub.io
*.oghub.io
js.oghub.io
*.oghub.io
js.oghub.io
*.oghub.io
js.oghub.io
backup.data.oghub.io
*.oghub.io
backup.data.oghub.io
*.oghub.io
test-extern.nitrosniffer.ottogroup.io
*.oghub.io
*.oghub.io
prod.nitrosniffer.ottogroup.io
js.oghub.io
*.oghub.io
js.oghub.io
*.oghub.io
js.oghub.io
*.oghub.io
ec0802.deepquery.data.oghub.io
js.oghub.io
*.test-extern.oghub.io
*.test-extern.oghub.io
js.oghub.io
*.test-intern.oghub.io
*.oghub.io
*.test-intern.oghub.io
*.oghub.io
backup.data.oghub.io
js.oghub.io
*.oghub.io
prod.nitrosniffer.ottogroup.io
*.oghub.io
*.oghub.io
js.oghub.io
js.oghub.io
js.oghub.io
*.test-extern.oghub.io
*.oghub.io
*.oghub.io
js.oghub.io
*.oghub.io
*.test-extern.oghub.io
*.test-intern.oghub.io
*.oghub.io
*.test-extern.oghub.io

Certificate

The complete raw certificate details for *.oghub.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3noZNhZgcYKuawF1n9wc
QCciWXdZttGMCd2ezHJnCiT8Naz2wBq0W4eeowZlRZjMeb2SdB23Bs64VL0GVpr3
Y7LpBBhSiCCYprbzaVRZGQVjsslSqITzD5yP5D4VVElucSqhDM6IBvuMR8xIn1TF
mieAw+ans/kOD+aOATE1cMrcUZBDhslY3UHCZ5Cz0bEnYRuyLNAkgXpAKmlhly+6
B/1ryqhmsa+Enh/MYr0bUT+mJbwgdh+8C+S8yCt+IN2rPhB6np5hjDDpn5QD8q2W
hoGdR5huX9xWROmT7LEzfKfWBxaZrM9C3dSgQ8ZRvEWjQeqt4y+T7sCH+5lUlwWa
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12052188443036983934255044818424587164
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.oghub.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28085112707741802267698363261542317871166084981753197416511349922677535861783237156605938799675944587898832057737230084568956800851078556999786324810503346780046836154669910210120386784724865141060862897550381394431201880880806851323248821982313721681616735503911517711092836212104828672574821860665796225070271288308056485072543338072566534564063733776576908089385252834558761316094429257924784777138110174383277598445848990249127179798501406532871718263776264379438310694801794685652274928195425975234032046646343241652910266521116882190903725227393116103676657344841371474724706063703168354197330600880965098511079
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b8ab8b7cdaedb10ca16459ad199588cf3c95e7db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (591 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oghub.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.ottoversand.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.frankonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.jelmoli-shop.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.sieh-an.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.heine.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.quelle.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.frankonia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.sieh-an.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.frankoniamoda.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.nitro-production.otto.boreus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.frankonia.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.universal.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.witt-weiden.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.otto.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.quelle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.baur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.witt-weiden.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.heine.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.quelle.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.waeschepur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.witt-weiden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.ambria.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.creation-l.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.heine-shop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.sportscheck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.helline.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.imwalking.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.sieh-an.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.ackermann.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.sportscheck.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.heine.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.schwab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.sheego.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.sportscheck.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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