www.nts.gdoc.go.kr

- National Tax Service -

Issued by CA131100001

About this certificate

This digital certificate with serial number 27:90:75:29:b9:05:b3:22:7f:b9:61:27:8a:63:19:5d:74:3d:cc:2f was issued on by Government of Korea.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DigitalSignature KeyEncipherment ContentCommitment DataEncipherment] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

National Tax Service

Organization: National Tax Service
State / Province: Sejong
Locality: Sejong-si
Country: KR

Government of Korea

Organization: Government of Korea
Organization unit: GPKI
Country: KR

This certificate will expire on

Certificate Details

Serial Number (hex): 27:90:75:29:b9:05:b3:22:7f:b9:61:27:8a:63:19:5d:74:3d:cc:2f
Serial Number (int): 225872153705685984873915807742206858973247556655
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 71:ca:00:a3:33:8f:37:89:85:81:49:54:1b:56:0f:d5:a5:5b:b8:ec
AuthorityKeyId: 92:a4:78:17:b1:aa:2f:19:d8:2b:3f:b9:b3:2b:23:15:83:d5:97:35

Fingerprint (sha1): ea:f5:a7:2b:91:a5:d5:67:d4:dc:7b:5b:b3:23:2d:09:a3:12:b2:f4
Fingerprint (sha256): 41:e3:fd:2d:ce:da:91:16:72:57:54:86:e2:62:be:00:3e:f6:f3:94:6f:14:91:62:7d:fc:0d:6d:83:54:25:e8

Issuing Certificate URL: http://ssl-crl.gpki.go.kr/CA131100001.cer

Revocation information

OCSP Server: http://ssl-ocsp-gov.gpki.go.kr:8100
CRL Distribution Point: ldap://cen.dir.go.kr:389/cn=crl3p1dp11,cn=CA131100001,ou=GPKI,o=Government of Korea,c=KR?certificateRevocationList;binary
CRL Distribution Point: http://ssl-crl.gpki.go.kr/crl/CA131100001/crl3p1dp11.crl

Check the revocation status for certificate www.nts.gdoc.go.kr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nts.gdoc.go.kr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nts.gdoc.go.kr
nts.gdoc.go.kr

Other certificates including the domain name gdoc.go.kr

(limited to 100 certificates)
geumsan.chungnam.gdoc.go.kr
*.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
seongbuk.seoul.gdoc.go.kr
seocho.seoul.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
seongbuk.seoul.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
wanju.jeonbuk.gdoc.go.kr
inje.gangwon.gdoc.go.kr
junggu.seoul.gdoc.go.kr
gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
distd.gdoc.go.kr
blkd.gdoc.go.kr
asan.chungnam.gdoc.go.kr
open.gdoc.go.kr
blkhd.gdoc.go.kr
seongbuk.seoul.gdoc.go.kr
seongbuk.seoul.gdoc.go.kr
extra2.gdoc.go.kr
blkd.gdoc.go.kr
blkhd.gdoc.go.kr
seongbuk.seoul.gdoc.go.kr
blkhs.gdoc.go.kr
dobong.seoul.gdoc.go.kr
center.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
hubd.gdoc.go.kr
extra2.gdoc.go.kr
distd.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
extra.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
mbox.gdoc.go.kr
www.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
seoul.gdoc.go.kr
seongbuk.seoul.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
esgate.gdoc.go.kr
daegu.daegu.gdoc.go.kr
extra2.gdoc.go.kr
www.nts.gdoc.go.kr
gangjin.jeonnam.gdoc.go.kr
blkd.gdoc.go.kr
kmsd.gdoc.go.kr
seongbuk.seoul.gdoc.go.kr
korus.gdoc.go.kr
seoul.gdoc.go.kr
www.gdoc.go.kr
red.gdoc.go.kr
open.gdoc.go.kr
rsgate.gdoc.go.kr
blks.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
seongbuk.seoul.gdoc.go.kr
res.gdoc.go.kr
haenam.jeonnam.gdoc.go.kr
red.gdoc.go.kr
center.gdoc.go.kr
blkhs.gdoc.go.kr
jungnang.seoul.gdoc.go.kr
open.gdoc.go.kr
*.gdoc.go.kr
rsgate.gdoc.go.kr
open.gdoc.go.kr
dobong.seoul.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
gunwi.gyeongbuk.gdoc.go.kr
sangju.gyeongbuk.gdoc.go.kr
dalseong.daegu.gdoc.go.kr
www.gdoc.go.kr
sangju.gyeongbuk.gdoc.go.kr
mntrng.gdoc.go.kr
www.gdoc.go.kr
jungnang.seoul.gdoc.go.kr
*.gdoc.go.kr
hubd.gdoc.go.kr
gokseong.jeonnam.gdoc.go.kr
res.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
sangju.gyeongbuk.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
dists.gdoc.go.kr
seongbuk.seoul.gdoc.go.kr
gangjin.jeonnam.gdoc.go.kr
daegu.daegu.gdoc.go.kr
gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
distd.gdoc.go.kr
dapa.gdoc.go.kr
seongbuk.seoul.gdoc.go.kr
gimpo.gyeonggi.gdoc.go.kr
gangdong.seoul.gdoc.go.kr
korus.gdoc.go.kr
geumsan.chungnam.gdoc.go.kr
open.gdoc.go.kr
damyang.jeonnam.gdoc.go.kr

Certificate

The complete raw certificate details for www.nts.gdoc.go.kr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0P6MsgyN7XRfqvfPNTl
ZbxVdFAeayFOC5iAE/6/ShSAyNNI93JooqMKGWEng8r8jg7r/qX5It48Y1TriY8D
39Tsea8wBbcQA2WOSjY5WeTgXWvRQNMimEJbaZuSsR7vsGI7jvxadJ3NBauoZ0vC
Lm9tlf/6k+N6smYvzGteadHSMlf816ypsTCXSt14jTv0fCVXxo1NklYR8Mx34jeW
WquZgXTWSSS5VXR91kfr0KTzVB/X5sNcABCP/gD8tOhFtohenHksuJAp84yGyU7I
iBSySY5Vl6elhsZb8GT82tLckWV2v8FFq9LPvDlyU4+ZQH7bCU4Z3JHIf5ZcgOJo
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 225872153705685984873915807742206858973247556655
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government of Korea'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'GPKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CA131100001'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 05:37:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-21 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sejong'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sejong-si'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'National Tax Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.nts.gdoc.go.kr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25154943562643933671294453602698393985181878391973728063833408609215356264480282121996942606118856272038716898735440556716511198107718049907295448662558717100573326289451278405959625090326478077892831160946014795620523613437076833769951409113803902152184356672829262123949369546919258082513396372829660575950103149434148110298179544296682933505372370974074231016663800245819257990272168602254692356458250040770245914685818933691888057426353632904926046401843943564587670703039121069995929129384754895629124409909283752176800822732105736454511633296932283169837558634985962872509081687723616414485055864046897978304661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 92a47817b1aa2f19d82b3fb9b32b231583d59735
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71ca00a3338f3789858149541b560fd5a55bb8ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.410.100001.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.gpki.go.kr/cps.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nts.gdoc.go.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nts.gdoc.go.kr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (196 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://cen.dir.go.kr:389/cn=crl3p1dp11,cn=CA131100001,ou=GPKI,o=Government of Korea,c=KR?certificateRevocationList;binary'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-crl.gpki.go.kr/crl/CA131100001/crl3p1dp11.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-ocsp-gov.gpki.go.kr:8100'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-crl.gpki.go.kr/CA131100001.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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