kaiju.data.sfdc.net

- salesforce.com, inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0b:7a:29:46:1b:a3:79:30:8a:94:ad:28:0a:aa:0a:59 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

salesforce.com, inc.

Organization: salesforce.com, inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:7a:29:46:1b:a3:79:30:8a:94:ad:28:0a:aa:0a:59
Serial Number (int): 15255805303694171765161052438079867481
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c6:4b:91:56:0c:a1:6d:14:3f:18:ad:7e:69:5d:e7:03:e6:91:db:51
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 8b:3f:ab:18:86:0f:2d:c1:e0:8f:e8:92:78:12:6a:17:e8:73:66:8c
Fingerprint (sha256): 4b:64:39:f6:b7:98:b6:9d:1a:51:37:0c:2f:a3:4b:26:46:4e:58:a9:72:01:df:dd:af:d5:f9:51:b7:10:bd:da

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate kaiju.data.sfdc.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kaiju.data.sfdc.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kaiju.data.sfdc.net
prod.kaiju.sfdc.sh

Other certificates including the domain name sfdc.net

(limited to 100 certificates)
gezwQ.carrs.canary.test.sfdc.net
twist35-pbsmatch1-0-prd.data.sfdc.net
shared1-pbsmatch1-0-ukb.data.sfdc.net
kms-prd.slb.sfdc.net
dTuxJ.carrs.canary.test.sfdc.net
auth-tmp.ops.sfdc.net
mcc.connectedappqa.sfdc.net
kanchan.sannidhanam.user.sfdc.net
shared0-pbsgeo2-0-dfw.data.sfdc.net
argusdev-ui.data.sfdc.net
cfg0-idbapima1-0-syd.data.sfdc.net
hLvrK.carrs.canary.test.sfdc.net
reportcollector-cdu.data.sfdc.net
auth-tmp.internal.salesforce.com
mchaulagain.user.sfdc.net
Pvwtc.carrs.canary.test.sfdc.net
public0-gateway1-1-par.ops.sfdc.net
deployment1-0-sfm.data.sfdc.net
ops0-csm4-1-sfm.ops.sfdc.net
kaiju-sandbox.data.sfdc.net
deployment1-0-sfz.data.sfdc.net
deployment1-0-chi.data.sfdc.net
testcslifecyclesetting.sfdc.net
public0-gateway2-1-ukb.ops.sfdc.net
alert-manager-api.data.sfdc.net
justatest.pkira.sfdc.net
test12345.sfdc.net
cidb1-0-syd.data.sfdc.net
shared1-pbsmatch1-0-dfw.data.sfdc.net
kaiju-sandbox.data.sfdc.net
twist55-pbsmatch1-0-prd.data.sfdc.net
digicert20j20w6jxl5.urawatchdog.sfdc.net
cstestkms.integration.sfdc.net
kaiju.data.sfdc.net
public0-gateway1-1-phx.ops.sfdc.net
srd-chx.net.salesforce.com
polcore-prd.eng.sfdc.net
kaiju-sandbox.data.sfdc.net
digicert2o7g3hntygh.urawatchdog.sfdc.net
mpreslermarshall.user.sfdc.net
public0-gateway2-1-dfw.ops.sfdc.net
idp.msonline.sfdc.net
LUQlp.carrs.canary.test.sfdc.net
kaiju.data.sfdc.net
shared-pbsmatch2-0-wax.data.sfdc.net
kaiju-sandbox.data.sfdc.net
public0-gateway1-1-dfw.ops.sfdc.net
kaiju.data.sfdc.net
public0-gateway1-1-frf.ops.sfdc.net
this.is.only.a.test.sfdc.net
shared0-pbsgeo2-0-phx.data.sfdc.net
srd-wax.net.salesforce.com
CpEiL.carrs.canary.test.sfdc.net
tdta-acrolinx-test.eng.sfdc.net
ops0-secds1-1-crd.eng.sfdc.net
shared2-pbsmatch1-0-hnd.data.sfdc.net
public0-gateway2-1-iad.ops.sfdc.net
ops0-poldata1-1.frf.ops.sfdc.net
kaiju.data.sfdc.net
MSGuV.carrs.canary.test.sfdc.net
ops0-poldata2-1-prd.eng.sfdc.net
twist34-pbsmatch1-0-prd.data.sfdc.net
auth-sfm.ops.sfdc.net
public0-gateway1-1-ord.ops.sfdc.net
clm.msprod.sfdc.net
svr.x111.sfdc.net
qtcperfeng.eng.sfdc.net
uvSCf.carrs.canary.test.sfdc.net
mcc.connectedappqa.sfdc.net
public0-gateway2-2-xrd.eng.sfdc.net
kaiju.data.sfdc.net
cstestkms.integration.sfdc.net
justatest.pkira.sfdc.net
mruber.gia.user.sfdc.net
cfg0-cidbapima1-0-cdu.data.sfdc.net
mcc.connectedappqa.sfdc.net
idp.msonline.sfdc.net
public0-gateway1-1-ord.ops.sfdc.net
justatest.pkira.sfdc.net
shared0-pbsgeo2-0-phx.data.sfdc.net
digicert1172fcopqzk.urawatchdog.sfdc.net
ops0-csm1-1-crd.ops.sfdc.net
testcslifecyclesetting.sfdc.net
ops0-polcore1-1-prd.eng.sfdc.net
tivNM.carrs.canary.test.sfdc.net
QFBcs.carrs.canary.test.sfdc.net
uuid3f9gn1.urawatchdog.sfdc.net
ops0-csm2-1-crd.ops.sfdc.net
ops0-csm2-1-sfm.ops.sfdc.net
idp.msonline.sfdc.net
wUsjv.carrs.canary.test.sfdc.net
public0-gateway2-1-dfw.ops.sfdc.net
auth-crd.eng.sfdc.net
kaiju.data.sfdc.net
ops0-csm1-1-sfm.ops.sfdc.net
tdr1-splunksrh1-1-sfz.ops.sfdc.net
shared0-pbsgeo2-0-cdu.data.sfdc.net
mcc.connectedapp.sfdc.net
public0-gateway2-1-ord.ops.sfdc.net
auth-crd.ops.sfdc.net

Certificate

The complete raw certificate details for kaiju.data.sfdc.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfhzBSvHdYhU/58ehiDf
xAZEZdYk36A0tuREbgxv94fAzSxMApWb/CJiQAwMAPc1Xqs2kyC0lKRPPexzM8Oi
rkRFCkFMgHFuhN5i9oteUJOw2k/fb06V2l3/CxcfzfvzbxrBW7kZuTgYQ7HFQiVI
yWK2uuSMSgHm1fuMQ63l140jc9lYTu9yOkF/OEoTHFRIiu3uq6AjLWVinLryKEzc
2hH8O7nUFK71eD3874WCfy9KUUgdIqUbnZZn/u3ZKgqwQ4hOEjo7BQPIN0z09sP/
xra3dDTEGq5tRHPCWBjWukMdTVmGcuSuEi5Q7/uEaiH2HV6RUPFymi8KRaDkRZ6s
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15255805303694171765161052438079867481
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'salesforce.com, inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kaiju.data.sfdc.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22971648113722904058843636632580429573112665536051164222874386259297935279868386027132486772521431269304624640778872127832051617904271666002450141326350008344024424012140996255087859385215616222402662884303585857547161848567528168347899092256930126896164207060366160154778295921049120448285381169927108275351959035611125953548721603137278362011887563446785353308059188177144303309591802457993346937313052566552298083330000572399118172337597132282351533017264756554487610878738329487841446558412598884515673838727089761434756225313172282455042502501850754488725175044469441798993799443290373241366969732536901560085697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c64b91560ca16d143f18ad7e695de703e691db51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaiju.data.sfdc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.kaiju.sfdc.sh'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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