vcsc1.txdot.gov

- Texas Department of Transportation -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 05:a2:f2:e2:7e:da:4d:2f:00:ae:20:b1:77:2a:51:2a was issued on by DigiCert Inc.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Texas Department of Transportation

Organization: Texas Department of Transportation
Organization unit: CH
State / Province: Texas
Locality: Austin
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:a2:f2:e2:7e:da:4d:2f:00:ae:20:b1:77:2a:51:2a
Serial Number (int): 7492218357955054923754499921446326570
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e6:33:04:0f:36:be:7f:e7:91:44:e7:7f:42:25:03:c2:c0:e9:9b:7f
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 22:5e:a1:02:21:10:03:53:5e:cd:90:3a:4e:d2:41:67:2e:d9:e2:04
Fingerprint (sha256): 3f:f1:55:68:42:e5:db:20:f2:db:5e:83:a5:05:8b:5f:de:1a:76:dd:82:f9:3a:f9:f8:49:7e:e0:48:55:32:03

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate vcsc1.txdot.gov

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vcsc1.txdot.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vcsc1.txdot.gov
conference-3-txdot-imp01.dot.state.tx.us
conference-2-standaloneclusteracd7c.dot.state.tx.us
conference-2-txdot-imp01.dot.state.tx.us
conference-3-standaloneclusteracd7c.dot.state.tx.us
dx80.secure.txdot.gov
mx300g2.txdot.gov

Other certificates including the domain name txdot.gov

(limited to 100 certificates)
sb20pca.txdot.gov
testporta.txdot.gov
mppm.txdot.gov
edit.drivetexas.txdot.gov
txrtn.txdot.gov
crisdev.dot.state.tx.us
po.txdotconnect.txdot.gov
mppm.txdot.gov
webex-sso.txdot.gov
arcgis.mppm.txdot.gov
www.dot.state.tx.us
crisuat.dot.state.tx.us
ftp.txdot.gov
testmap.drivetexas.txdot.gov
ADFS.TXDOT.GOV
jaspere2eext.txdotconnect.txdot.gov
externalusers.txdot.gov
publicdocs.txdot.gov
mycitrixsf.txdot.gov
edit.drivetexas.txdot.gov
apps.dot.state.tx.us
cgust.txdot.gov
cgwuat.txdot.gov
hr.txdot.gov
editmap2.drivetexas.txdot.gov
dev.txdotconnect.txdot.gov
cris.dot.state.tx.us
hcmust.txdot.gov
remote.txdot.gov
apps2.dot.state.tx.us
contractsinternal.txdot.gov
txdot4sverpweb1.txdot.gov
txdotconnect.txdot.gov
cris.dot.state.tx.us
ecmmobile.txdot.gov
e2eext.txdotconnect.txdot.gov
ftp.txdot.gov
oc1.txdot.gov
www.txdot.gov
externalusers.txdot.gov
cris.dot.state.tx.us
uatext.txdotconnect.txdot.gov
mycitrixsf.TxDOT.gov
AVNMET.txdot.gov
avnmetfiles.txdot.gov
fbde.txdotconnect.txdot.gov
webex-sso.txdot.gov
externalusers.txdot.gov
mppm-ref.txdot.gov
qa2.txdotconnect.txdot.gov
dev.txdotconnect.txdot.gov
fin.txdot.gov
testportal.txdot.gov
ADFS.TXDOT.GOV
txdotconnect.txdot.gov
www.txdot.gov
citrix.txdot.gov
edit.drivetexas.txdot.gov
txdot4azitsmon1.dot.state.tx.us
ecmmobile.txdot.gov
AAHUAT.txdot.gov
last.mppm.txdot.gov
matsuat.txdot.gov
TXDOT4AZK2WPRD1.dot.state.tx.us
ftp.txdot.gov
remote.txdot.gov
adfs.txdot.gov
sb20pca.txdot.gov
crossroadsuat.txdot.gov
txdot-xenweb.dot.state.tx.us
enabler.txdotconnect.txdot.gov
ftp.txdot.gov
cris.dot.state.tx.us
txdot4sverpdlx1.txdot.gov
oc1.txdot.gov
editmap.drivetexas.txdot.gov
cgust.txdot.gov
apps2.dot.state.tx.us
elm.txdot.gov
editmap.drivetexas.txdot.gov
mycitrix.txdot.gov
finust.txdot.gov
avnmet.txdot.gov
apps2.dot.state.tx.us
TNTODAY.dot.state.tx.us
www.txdot.gov
testmap2.drivetexas.txdot.gov
mppm.txdot.gov
devarcgis.txdotconnect.txdot.gov
apps.dot.state.tx.us
externalusers.txdot.gov
reports.txdot.gov
*.mppm.txdot.gov
txrtn.txdot.gov
fbqa.txdotconnect.txdot.gov
edit.drivetexas.txdot.gov
vcsc1.txdot.gov
its.txdot.gov
fin.txdot.gov
trn.pmdis.txdot.gov

Certificate

The complete raw certificate details for vcsc1.txdot.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7492218357955054923754499921446326570
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Austin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas Department of Transportation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vcsc1.txdot.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 653746868533805710941402283547719826051566172066981596468239894876552464625712506862593628758039431015730759632926055088899250461715536182870362185271521595849269458191180542673785721341882540184863119094345113500023102363088889650844689598238412589097240383934895583505637261275344385202038042895837470128107549081022746624203991801378821151301035720956275213073644536018015060846094082533370456061495508628385613647307587956704311181314234998855821860458493827818904827756587810932636186377466828519719510855262549445882175798560378306975440233831471186427406105545076731115438641792384912093247215132830557400852446584073448211277789357950487822156626717763383673192639238388117501123297321336917835687626914053802665104837335554178485797176688869006725042117452232899285295947054513876934089673165554671125790274736210637071487326012561246902922438400518468443650255370422681234805375746922529359906726571755130983083822062302248658920576758278130256881438168357434322604031264087593873884951565492148238605583724503729403478052220021114410690460136815666400618952300244186064464739819984149255476932911545916510947266855325070323894654110804006210864904526575615808568430869896235783127261756121921785949257229820205106857826089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e633040f36be7fe79144e77f422503c2c0e99b7f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (252 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcsc1.txdot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-3-txdot-imp01.dot.state.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-2-standaloneclusteracd7c.dot.state.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-2-txdot-imp01.dot.state.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-3-standaloneclusteracd7c.dot.state.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dx80.secure.txdot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx300g2.txdot.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000b0142b846e2a20e91fd95305bb2014a7323a2cc43e6f4cc007e7f0b01929e747ab9d40e8f3406d291f7cdf2fbbb396a7320ef65bcc5ffa4bafe8d146f9d451dd4f02af4c1b1e20a45fb34897689dd71890dd3f9b3c71d8769d9d159dd67b850f19090016420239b1a5318359d045841214e52a14723fc86d126b3031bb8a748157b22aa9299da7c6d3bca9f26248ba056302848c554b83b98250a1fe76ebc0e8c99e764b0d86de97a4bc83a18fa173928bb954bc85faaf8e02157d3359d54deff096f7834d6248842699b8cb920349d731e06540c2eda9fc627019edacd0817abfe87d661d2951d18f663beb30677a166f7deb169909daed5da76fe2096e422