api.azsupport-ppe.msftcloudes.cn

- Shanghai Blue Cloud Technology Co. Ltd -

Issued by DigiCert Basic RSA CN CA G2

About this certificate

This digital certificate with serial number 08:50:34:fd:f3:a0:75:cc:9a:2b:e3:a0:af:aa:34:28 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Shanghai Blue Cloud Technology Co. Ltd

Organization: Shanghai Blue Cloud Technology Co. Ltd
State / Province: Shanghai
Country: CN

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:50:34:fd:f3:a0:75:cc:9a:2b:e3:a0:af:aa:34:28
Serial Number (int): 11050282520385460998101054950700889128
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0f:bb:ac:db:5c:f6:e5:59:94:b1:a1:49:e1:d0:10:09:ee:5c:2f:f4
AuthorityKeyId: 06:bd:a6:9b:60:79:50:31:be:d5:a9:02:4a:a0:d0:95:53:8b:2f:34

Fingerprint (sha1): 8a:fd:ae:18:28:2b:e5:bc:a8:fe:1d:90:f5:ca:84:36:ec:49:6f:74
Fingerprint (sha256): 43:83:a3:69:69:66:70:89:0c:85:f5:e0:25:1a:9f:8a:66:cb:f8:96:af:92:51:b6:8b:7c:bb:ba:c3:20:83:da

Issuing Certificate URL: http://cacerts.digicert.cn/DigiCertBasicRSACNCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.cn
CRL Distribution Point: http://crl.digicert.cn/DigiCertBasicRSACNCAG2.crl

Check the revocation status for certificate api.azsupport-ppe.msftcloudes.cn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.azsupport-ppe.msftcloudes.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.azsupport-ppe.msftcloudes.cn

Other certificates including the domain name msftcloudes.cn

(limited to 100 certificates)
monitoring.azurenotifications.msftcloudes.cn
*.azurenotifications.msftcloudes.cn
mcpclientprod.azurenotifications.msftcloudes.cn
azurehealthmccno.chinanorth.cloudapp.chinacloudapi.cn
*.oneim.msftcloudes.cn
azurehealthmccno.chinanorth.cloudapp.chinacloudapi.cn
internal-endpoint.azsupport.msftcloudes.cn
adthrottlingclient.broadcast.azurenotifications.msftcloudes.cn
*.mdmrp-mooncake.msftcloudes.cn
api.azsupport.msftcloudes.cn
azurehealthmccea.chinaeast.cloudapp.chinacloudapi.cn
api.cps.azuresupport.msftcloudes.cn
internal-endpoint.azsupport.msftcloudes.cn
*.cluster.azsupport.msftcloudes.cn
*.cluster.azsupport-ppe.msftcloudes.cn
phonenotificationclient.notifications.msftcloudes.cn
*.mdmrp-mooncake.msftcloudes.cn
adthrottlingclient.broadcast.azurenotifications.msftcloudes.cn
azureexpertmceast.chinaeast.cloudapp.chinacloudapi.cn
*.cluster.azsupport.msftcloudes.cn
ngclient.private.azurenotifications.msftcloudes.cn
*.mdmrp-mooncake.msftcloudes.cn
azureexpert.trafficmanager.cn
mcheccluster.azurenotifications.msftcloudes.cn
*.icm.msftcloudes.cn
emailclientprod.azurenotifications.msftcloudes.cn
mccncluster.azurenotifications.msftcloudes.cn
*.cluster.azsupport-ppe.msftcloudes.cn
mccnclusterserver.azurenotifications.msftcloudes.cn
phonenotificationclient.notifications.msftcloudes.cn
*.mdmrp-mooncake.msftcloudes.cn
skypeclient.notifications.msftcloudes.cn
azureexpertmcnorth.chinanorth.cloudapp.chinacloudapi.cn
internalauth.azsupport-ppe.msftcloudes.cn
api.azsupport-ppe.msftcloudes.cn
internalauth.azsupport.msftcloudes.cn
rpclient.azurenotifications.msftcloudes.cn
monitoring-encryption-prod.notifications.msftcloudes.cn
oneimsecretencryption.azurenotifications.msftcloudes.cn
adthrottlingclient.broadcast.azurenotifications.msftcloudes.cn
*.icmtest.msftcloudes.cn
*.cluster.azsupport-ppe.msftcloudes.cn
azurehealthmccno.chinanorth.cloudapp.chinacloudapi.cn
mooncakeproddecryptionservice.icm.msftcloudes.cn
internalauth.azsupport-ppe.msftcloudes.cn
*.cluster.azsupport-ppe.msftcloudes.cn
icm.msftcloudes.cn
azureexpertmceast.chinaeast.cloudapp.chinacloudapi.cn
mccncluster.azurenotifications.msftcloudes.cn
azureexpert.trafficmanager.cn
mctestmdsencryption.icm.msftcloudes.cn
icmtesttwist.msftcloudes.cn
warmup.azurenotifications.msftcloudes.cn
api.azsupport-ppe.msftcloudes.cn
prodmonitoring1.icm.msftcloudes.cn
azureexpert.trafficmanager.cn
*.cluster.azsupport-ppe.msftcloudes.cn
MCTestESManagementCertificate.icm.msftcloudes.cn
mctestmdsdecryption1.icm.msftcloudes.cn
*.mdmrp-mooncake.msftcloudes.cn
*.cluster.azsupport-ppe.msftcloudes.cn
api.azsupport-ppe.msftcloudes.cn
*.azurenotifications.msftcloudes.cn
mchecclusterserver.azurenotifications.msftcloudes.cn
internalauth.azsupport-ppe.msftcloudes.cn
testmonitoring.icm.msftcloudes.cn
templateserviceclient.azurenotifications.msftcloudes.cn
cluster.azurenotifications.msftcloudes.cn
monitoring.azurenotifications.msftcloudes.cn
api.azsupport-ppe.msftcloudes.cn
clusterclient.azurenotifications.msftcloudes.cn
mcecclusterserver.azurenotifications.msftcloudes.cn
azureexpertmcnorth.chinanorth.cloudapp.chinacloudapi.cn
*.mdmrp-mooncake.msftcloudes.cn
internal-endpoint.azsupport.msftcloudes.cn
api.azsupport.msftcloudes.cn
mccnclusterserver.azurenotifications.msftcloudes.cn
*.azurenotifications.msftcloudes.cn
phonenotificationclient.notifications.msftcloudes.cn
api.azsupport.msftcloudes.cn
mcheccluster.azurenotifications.msftcloudes.cn
clusteradminclient.azurenotifications.msftcloudes.cn
icm.msftcloudes.cn
azureexpertmcnorth.chinanorth.cloudapp.chinacloudapi.cn
api.azsupport-ppe.msftcloudes.cn
clusteradminclient.azurenotifications.msftcloudes.cn
clusterserver.azurenotifications.msftcloudes.cn
ngclient.private.azurenotifications.msftcloudes.cn
skypeclient.notifications.msftcloudes.cn
mchecclusterserver.azurenotifications.msftcloudes.cn
*.cluster.azsupport.msftcloudes.cn
*.mdmrp-mooncake.msftcloudes.cn
mccncluster.azurenotifications.msftcloudes.cn
clusteradminclient.azurenotifications.msftcloudes.cn
warmup.azurenotifications.msftcloudes.cn
mctestmdsdecryption1.icm.msftcloudes.cn
icmtwist.msftcloudes.cn
api.azsupport.msftcloudes.cn
internal-endpoint.azsupport-ppe.msftcloudes.cn
internalauth.azsupport.msftcloudes.cn

Certificate

The complete raw certificate details for api.azsupport-ppe.msftcloudes.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0E3lxbrD0QPafoe8D3MJ
yfN/aSW7N6ujgxVkLfxvgkfLBqh71byXCFlB3It2ExFy5T74WirPcfspSQfTQ/p0
arldOP0KGdhsAOKt3BrxobrPIp04JqQ+ktqstSmhcbvB207DaoEAg7y45BUNHYD1
WeGL5nDPYwvZ1ztEWF9szOKT7lHg9asO3zIEiMPZCUuJJJicPa8CWpj1IGVb8L+J
/kDi2sA5sjx5ar4I4aKjS2uhKEI8yAR8l8AE121IbPtnvLS615bbT6LFILfmPBQI
6wzOoHEthdf8EhWtT1Lw/RQ1gtZ+kPs9OIKvdLed5OnT0WdV38V8JGxEzO/0LG25
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11050282520385460998101054950700889128
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Basic RSA CN CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai Blue Cloud Technology Co. Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.azsupport-ppe.msftcloudes.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26295980145699646477422363249945950291012189250272427996171564706792877178633992090762221626170115143395185647401866774106600552172478569632223315095155769556448256747924662561841766246544288934354925182787735934709218582430448157873141760351820370061719414311596146116264486181099420281836112612337202375181610889597414217571542466957312350384842019271848765497176623045621231760613193062723504819965119351047348322088420048096033729108256979829087566137048471552694128875339084565731187278674002905268249949429137186366903139149640476136728589864485548893591278618296912162846991595714381437090358880633334988126641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 06bda69b60795031bed5a9024aa0d095538b2f34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0fbbacdb5cf6e55994b1a149e1d01009ee5c2ff4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.azsupport-ppe.msftcloudes.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.cn/DigiCertBasicRSACNCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.cn/DigiCertBasicRSACNCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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