js.oghub.io

Issued by Amazon

About this certificate

This digital certificate with serial number 02:6d:10:17:e0:ec:e6:17:24:16:11:da:ae:16:eb:37 was issued on by Amazon.

With 34 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=js.oghub.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:6d:10:17:e0:ec:e6:17:24:16:11:da:ae:16:eb:37
Serial Number (int): 3224742759562559476700793087051885367
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 11:c1:e6:a2:85:89:b7:b3:0b:d4:f2:0a:f2:7d:34:3c:7c:39:5a:4b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): b9:1a:1d:54:57:39:a7:c4:a5:45:28:ce:81:94:33:04:57:e3:89:ff
Fingerprint (sha256): 53:20:7b:e0:43:f3:11:f0:b8:20:79:f8:9e:d4:c8:5a:00:33:86:67:c7:39:0b:f8:0e:ff:98:f7:96:ff:f9:1a

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate js.oghub.io

34

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for js.oghub.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

js.oghub.io
tp.ambria.de
tp.ottoversand.at
tp.imwalking.de
tp.baur.de
tp.witt-weiden.at
tp.frankoniamoda.ch
tp.frankonia.com
tp.otto.de
tp.waeschepur.de
tp.quelle.de
tp.frankonia.de
tp.creation-l.de
tp.jelmoli-shop.ch
tp.sportscheck.at
tp.frankonia.at
tp.sportscheck.ch
tp.universal.at
tp.quelle.at
tp.quelle.ch
tp.sportscheck.com
tp.schwab.de
tp.witt-weiden.ch
tp.sieh-an.at
tp.heine.ch
tp.sieh-an.de
tp.heine.de
tp.sheego.de
tp.sieh-an.ch
tp.heine.at
tp.heine-shop.nl
tp.ackermann.ch
tp.helline.fr
tp.witt-weiden.de

Other certificates including the domain name oghub.io

(limited to 100 certificates)
*.oghub.io
js.oghub.io
*.oghub.io
*.oghub.io
*.test-extern.oghub.io
backup.data.oghub.io
js.oghub.io
*.oghub.io
*.test-intern.oghub.io
*.oghub.io
js.oghub.io
*.test-extern.oghub.io
*.oghub.io
*.test-extern.oghub.io
*.oghub.io
backup.data.oghub.io
*.oghub.io
*.oghub.io
js.oghub.io
*.oghub.io
*.oghub.io
*.test-extern.oghub.io
backup.data.oghub.io
*.test-extern.oghub.io
*.oghub.io
js.oghub.io
js.oghub.io
js.oghub.io
js.oghub.io
js.oghub.io
js.oghub.io
*.oghub.io
*.oghub.io
js.oghub.io
*.oghub.io
js.oghub.io
test-extern.nitrosniffer.ottogroup.io
*.test-intern.oghub.io
js.oghub.io
*.oghub.io
argo-ui.usergraph.data.oghub.io
*.oghub.io
*.test-intern.oghub.io
js.oghub.io
*.test-intern.oghub.io
*.oghub.io
*.test-extern.oghub.io
*.oghub.io
prod.nitrosniffer.ottogroup.io
*.test-extern.oghub.io
js.oghub.io
js.oghub.io
js.oghub.io
*.oghub.io
js.oghub.io
*.oghub.io
js.oghub.io
*.oghub.io
js.oghub.io
backup.data.oghub.io
*.oghub.io
backup.data.oghub.io
*.oghub.io
test-extern.nitrosniffer.ottogroup.io
*.oghub.io
*.oghub.io
prod.nitrosniffer.ottogroup.io
js.oghub.io
*.oghub.io
js.oghub.io
*.oghub.io
js.oghub.io
*.oghub.io
ec0802.deepquery.data.oghub.io
js.oghub.io
*.test-extern.oghub.io
*.test-extern.oghub.io
js.oghub.io
*.test-intern.oghub.io
*.oghub.io
*.test-intern.oghub.io
*.oghub.io
backup.data.oghub.io
js.oghub.io
*.oghub.io
prod.nitrosniffer.ottogroup.io
*.oghub.io
*.oghub.io
js.oghub.io
js.oghub.io
js.oghub.io
*.test-extern.oghub.io
*.oghub.io
*.oghub.io
js.oghub.io
*.oghub.io
*.test-extern.oghub.io
*.test-intern.oghub.io
*.oghub.io
*.test-extern.oghub.io

Certificate

The complete raw certificate details for js.oghub.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWI6q1uDZMV8NONcaLA0
1TzXdpXJZZi1H2f/0sm7hb2oK12SCnrM9gggmIjChgamCHhZtiWcNfWy7XHIe4q+
V+Qmh8XsvbVbWdFm/JKsXOPWCvFughAKiA+QQBmaYCZcOgfygFa7mZmFEYf8EIaJ
A2RexzKkiU6q4ox8RjzEWgFJ5TcZjutUkpVQ4z/Z4uBlG4i3VuemIkgAm1ds/OjU
QPgJY51YmaVwLBXasBDBGhZGn406kj3MJO0hA0HoNeJj7onyGc5ndfJ4lu2EJ9YW
7brp1N6ZapcaJWVpC7heXhGQq4b/UHfDRTlJydNVsRWHL3C18sHYD3ZaG/XJhtjp
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3224742759562559476700793087051885367
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'js.oghub.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25927291130654873262767429496962272979542276919137870557671725261857454975357595450942334087372090448572523307302281995286705802885750171262230410561358318294853483436615015508452480758610002840943808195608534180393174026468525194619120434653522575620228519323929699674257671188834583985643402547680471645173024788482658582477018890444031741784442433898203793892208170969602049996238761478548318236933646311823372327413277171192745522449582402927088271925839157900619414627534605964870870767336533925050196786613309491232470597384388779733840500621775436396665843703981518826394578673580631338914638871875990708611431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11c1e6a28589b7b30bd4f20af27d343c7c395a4b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (556 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'js.oghub.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.ambria.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.ottoversand.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.imwalking.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.baur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.witt-weiden.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.frankoniamoda.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.frankonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.otto.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.waeschepur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.quelle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.frankonia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.creation-l.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.jelmoli-shop.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.sportscheck.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.frankonia.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.sportscheck.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.universal.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.quelle.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.quelle.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.sportscheck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.schwab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.witt-weiden.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.sieh-an.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.heine.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.sieh-an.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.heine.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.sheego.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.sieh-an.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.heine.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.heine-shop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.ackermann.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.helline.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp.witt-weiden.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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