jenkins.carsome.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0c:74:03:16:ed:2d:af:11:5e:f4:df:67:64:fe:45:85 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=jenkins.carsome.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:74:03:16:ed:2d:af:11:5e:f4:df:67:64:fe:45:85Serial Number (int): 16553105048660592472694851607935731077
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 12:13:0f:bc:af:d6:cb:4d:ae:41:79:6a:76:eb:5d:f0:03:17:67:d6
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 12:f5:0b:c1:69:00:a7:18:91:16:28:9b:ad:3a:97:e0:bc:69:81:84
Fingerprint (sha256): 44:50:2b:68:27:30:95:a1:10:b4:a0:5d:f2:f6:10:c8:50:d9:f6:58:1b:1c:bb:6f:04:f9:96:70:e6:ba:b4:96
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate jenkins.carsome.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for jenkins.carsome.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
jenkins.carsome.com
Other certificates including the domain name carsome.com
(limited to 100 certificates)
servicedesk.presbyterianhomes.org
dev.widget.carsome.com
cms.carsome.com
dev.api.carsome.com
soporte.familiabercomat.com
api.carsome.com
soporte.familiabercomat.com
carsome.com
beco.refeicao.online
soporte.familiabercomat.com
www.carsome.com
yardimmasasi.egeyapi.com
carsome.com
url.carsome.com
carsome.com
soporte.familiabercomat.com
dev-be.carsome.com
soporte.familiabercomat.com
carsome.com
dev.widget.carsome.com
widget.carsome.com
shredreel.com
cms.carsome.com
dev.widget.carsome.com
admin.aproveitepetropolis.com.br
codewords.brocco.me
bi.carsome.com
api.insp.carsome.com
*.carsome.com
widget.carsome.com
*.carsome.com
master.api.carsome.com
dev.api.carsome.com
api.carsome.com
93staples.com
dev.widget.carsome.com
soporte.familiabercomat.com
soporte.familiabercomat.com
soporte.familiabercomat.com
test.web.carsome.com
help.helaclothing.com
bi.carsome.com
carsome.com
jenkins.carsome.com
serverless.carsome.com
soporte.familiabercomat.com
soporte.familiabercomat.com
api.poc.carsome.com
*.carsome.com
soporte.familiabercomat.com
dev-fe.carsome.com
*.carsome.my
dev-fe.carsome.com
staging.pricing.carsome.com
soporte.familiabercomat.com
api.poc2.carsome.com
dev.widget.carsome.com
soporte.familiabercomat.com
ws.carsome.com
*.carsome.my
pricing-test.staging.pricing.carsome.com
widget.carsome.com
soporte.familiabercomat.com
servicedesk.presbyterianhomes.org
tae.carsome.com
dev-fe.carsome.com
soporte.familiabercomat.com
soporte.familiabercomat.com
test.api.carsome.com
yardimmasasi.egeyapi.com
public-api.data.carsome.com
it.carsome.com
yardimmasasi.egeyapi.com
testreg.bodadmin.com
carsome.com
emennu.com
accounts.carsome.com
soporte.familiabercomat.com
carsome.com
dev.widget.carsome.com
carsome.com
help.helaclothing.com
soporte.familiabercomat.com
www.beachesmountains.com
cms.carsome.com
jenkins.carsome.com
www.mattstockton.dev
it.carsome.com
soporte.familiabercomat.com
ecsprod.pricing.carsome.com
*.carsome.com
carsome.com
it.carsome.com
url.carsome.com
soporte.familiabercomat.com
soporte.familiabercomat.com
api.carsome.com
soporte.familiabercomat.com
api.carsome.com
www.northrushcemetery.org
dev.widget.carsome.com
cms.carsome.com
dev.api.carsome.com
soporte.familiabercomat.com
api.carsome.com
soporte.familiabercomat.com
carsome.com
beco.refeicao.online
soporte.familiabercomat.com
www.carsome.com
yardimmasasi.egeyapi.com
carsome.com
url.carsome.com
carsome.com
soporte.familiabercomat.com
dev-be.carsome.com
soporte.familiabercomat.com
carsome.com
dev.widget.carsome.com
widget.carsome.com
shredreel.com
cms.carsome.com
dev.widget.carsome.com
admin.aproveitepetropolis.com.br
codewords.brocco.me
bi.carsome.com
api.insp.carsome.com
*.carsome.com
widget.carsome.com
*.carsome.com
master.api.carsome.com
dev.api.carsome.com
api.carsome.com
93staples.com
dev.widget.carsome.com
soporte.familiabercomat.com
soporte.familiabercomat.com
soporte.familiabercomat.com
test.web.carsome.com
help.helaclothing.com
bi.carsome.com
carsome.com
jenkins.carsome.com
serverless.carsome.com
soporte.familiabercomat.com
soporte.familiabercomat.com
api.poc.carsome.com
*.carsome.com
soporte.familiabercomat.com
dev-fe.carsome.com
*.carsome.my
dev-fe.carsome.com
staging.pricing.carsome.com
soporte.familiabercomat.com
api.poc2.carsome.com
dev.widget.carsome.com
soporte.familiabercomat.com
ws.carsome.com
*.carsome.my
pricing-test.staging.pricing.carsome.com
widget.carsome.com
soporte.familiabercomat.com
servicedesk.presbyterianhomes.org
tae.carsome.com
dev-fe.carsome.com
soporte.familiabercomat.com
soporte.familiabercomat.com
test.api.carsome.com
yardimmasasi.egeyapi.com
public-api.data.carsome.com
it.carsome.com
yardimmasasi.egeyapi.com
testreg.bodadmin.com
carsome.com
emennu.com
accounts.carsome.com
soporte.familiabercomat.com
carsome.com
dev.widget.carsome.com
carsome.com
help.helaclothing.com
soporte.familiabercomat.com
www.beachesmountains.com
cms.carsome.com
jenkins.carsome.com
www.mattstockton.dev
it.carsome.com
soporte.familiabercomat.com
ecsprod.pricing.carsome.com
*.carsome.com
carsome.com
it.carsome.com
url.carsome.com
soporte.familiabercomat.com
soporte.familiabercomat.com
api.carsome.com
soporte.familiabercomat.com
api.carsome.com
www.northrushcemetery.org
Certificate
The complete raw certificate details for jenkins.carsome.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEfDCCA2SgAwIBAgIQDHQDFu0trxFe9N9nZP5FhTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTEwMTgwMDAwMDBaFw0yMDExMTgx MjAwMDBaMB4xHDAaBgNVBAMTE2plbmtpbnMuY2Fyc29tZS5jb20wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCULGKW4+WFvPAyoSgmSOxlWCdM4asPq58f CLXPHPzzp6hX8sTBN4S5V4ljhCBidI8CE3/LvhrPLc3GdL8+VDlKvQD4Pq1+zhyJ hRE3QkAtp4Umc/MuFIkKeDkhpExKRlpfboMO053Iqyqh+8nzsousZ95jCrC/rxmf 5Z5iydWS2pADWZf96spmWgqLUjZ07XBbHWyrnq0uTkQpgAO8tPtL+OlC4ZMOoJTL 8L4auZFhK83VZm/vumxxVTsqfyk2m94gZXaEmwpuZy8pqjlwflTY8w076jaD2edR ZoAu1N/J17XgQzk20eaVdaJyZ9/DXAN5as6rgfIEfYDmHVOBI1iXAgMBAAGjggGM MIIBiDAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQU EhMPvK/Wy02uQXlqdutd8AMXZ9YwHgYDVR0RBBcwFYITamVua2lucy5jYXJzb21l LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1 c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwB AgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2Ex Yi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIu YW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB 1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAvFrtmy6GeRFL8RNtIzYGS xt/o919IUN52aqS/gcZY4MdCVtHb95FPrjw+qxBAuH61Uy5RZw/M5wy0BBhRlfHT tmbhOsQ2emMDJIBh2s1TDbkb8K4wR+7tdjCNA5o+/O/D+L+HFdMUSlrP7U/Sa4YM RDn10+3f7ERV/K9cnwhTm1HpZ8eYKm1JLIUtNeUDvgypxtxThZYxZcgC3NbhInCC EkJPNS1zBzWmyVND/J6Oi7u46JFsF820Oug8Q9Fow/ZYsW6NgxY5I7X/gY+lbl3Z A9Yx0aiYMnv+sry7HUV4AJgvWxKkye2zbbqfx26pBh9S38YXd2bpiOMkAZKqHY6C -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCxiluPlhbzwMqEoJkjs ZVgnTOGrD6ufHwi1zxz886eoV/LEwTeEuVeJY4QgYnSPAhN/y74azy3NxnS/PlQ5 Sr0A+D6tfs4ciYURN0JALaeFJnPzLhSJCng5IaRMSkZaX26DDtOdyKsqofvJ87KL rGfeYwqwv68Zn+WeYsnVktqQA1mX/erKZloKi1I2dO1wWx1sq56tLk5EKYADvLT7 S/jpQuGTDqCUy/C+GrmRYSvN1WZv77pscVU7Kn8pNpveIGV2hJsKbmcvKao5cH5U 2PMNO+o2g9nnUWaALtTfyde14EM5NtHmlXWicmffw1wDeWrOq4HyBH2A5h1TgSNY lwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16553105048660592472694851607935731077 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-18 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jenkins.carsome.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18705156250878859667315386546891068221971996643701339075868217613725941581372834968035351677273335886782622342538005921684305307868014084297664284814819830219761065745616859257340208378715091802627650821294974558624828350534053839310710054606671597896095678417285717842523100588227361779556428507467728524699010230534786335887676888286357491624028295955629557992206849985264787887565199196018185638211614100849086204809771928099531924491055157217459854354529522206725581710052816063675743668600109739873645782735050696412706758178795838656272562031976691415260832675554735287776792419099788897006501007714764972054679 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 12130fbcafd6cb4dae41796a76eb5df0031767d6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenkins.carsome.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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