docs.api.ento.com
Issued by R3
About this certificate
This digital certificate with serial number 03:54:c9:29:f9:5d:ba:ca:ff:f4:84:96:3e:d0:5f:21:38:39 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=docs.api.ento.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:54:c9:29:f9:5d:ba:ca:ff:f4:84:96:3e:d0:5f:21:38:39Serial Number (int): 290187969385709558935830464376742464272441
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 72:83:16:0f:2b:83:f3:65:9d:0a:7f:5e:10:e9:41:76:89:9b:c4:32
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 41:06:8a:a0:3d:46:22:d3:6a:46:66:25:d3:70:2a:3d:67:b7:58:1f
Fingerprint (sha256): 57:e5:90:d6:e4:e4:f8:d2:a4:df:2c:aa:5c:a9:bb:10:1c:25:7e:1d:e9:b8:82:6e:13:97:2f:b2:54:0d:26:94
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate docs.api.ento.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for docs.api.ento.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
docs.api.ento.com
Other certificates including the domain name ento.com
(limited to 100 certificates)
ento.com
standards-tools-status.ieee.org
ento.com
cc20.status.jasper.com
itstatus.honegger.ch
internal.status.ento.com
internal.status.ento.com
cc20.status.jasper.com
ento.com
cc20.status.jasper.com
*.sit.ento.com
internal.status.ento.com
cc20.status.jasper.com
*.dev.ento.com
internal.status.ento.com
internal.status.ento.com
internal.status.ento.com
cc20.status.jasper.com
cc20.status.jasper.com
itstatus.honegger.ch
internal.status.ento.com
ento.com
cc20.status.jasper.com
internal.status.ento.com
status.bigpicture.one
internal.status.ento.com
itstatus.honegger.ch
status.cayuse.com
itstatus.honegger.ch
internal.status.ento.com
ento.com
itstatus.honegger.ch
itstatus.honegger.ch
cc20.status.jasper.com
internal.status.ento.com
cc20.status.jasper.com
docs.api.ento.com
internal.status.ento.com
ento.com
ento.com
internal.status.ento.com
cc20.status.jasper.com
ento.com
cc20.status.jasper.com
internal.status.ento.com
cc20.status.jasper.com
itstatus.honegger.ch
internal.status.ento.com
project.ento.com
internal.status.ento.com
*.ento.com
itstatus.honegger.ch
status.cayuse.com
cc20.status.jasper.com
ento.com
itstatus.honegger.ch
ento.com
itstatus.honegger.ch
cc20.status.jasper.com
internal.status.ento.com
internal.status.ento.com
cc20.status.jasper.com
internal.status.ento.com
internal.status.ento.com
itstatus.honegger.ch
cc20.status.jasper.com
itstatus.honegger.ch
cc20.status.jasper.com
internal.status.ento.com
adfs.dev.ento.com
internal.status.ento.com
cc20.status.jasper.com
internal.status.ento.com
internal.status.ento.com
local.dev.au.cdn.ento.com
status.blakeschool.org
itstatus.honegger.ch
internal.status.ento.com
cc20.status.jasper.com
internal.status.ento.com
qa.ento.com
internal.status.ento.com
itstatus.honegger.ch
internal.status.ento.com
ento.com
internal.status.ento.com
ento.com
internal.status.ento.com
status.blakeschool.org
ento.com
docs.api.ento.com
itstatus.honegger.ch
internal.status.ento.com
ento.com
adfs.dev.ento.com
internal.status.ento.com
internal.status.ento.com
itstatus.honegger.ch
internal.status.ento.com
ento.com
standards-tools-status.ieee.org
ento.com
cc20.status.jasper.com
itstatus.honegger.ch
internal.status.ento.com
internal.status.ento.com
cc20.status.jasper.com
ento.com
cc20.status.jasper.com
*.sit.ento.com
internal.status.ento.com
cc20.status.jasper.com
*.dev.ento.com
internal.status.ento.com
internal.status.ento.com
internal.status.ento.com
cc20.status.jasper.com
cc20.status.jasper.com
itstatus.honegger.ch
internal.status.ento.com
ento.com
cc20.status.jasper.com
internal.status.ento.com
status.bigpicture.one
internal.status.ento.com
itstatus.honegger.ch
status.cayuse.com
itstatus.honegger.ch
internal.status.ento.com
ento.com
itstatus.honegger.ch
itstatus.honegger.ch
cc20.status.jasper.com
internal.status.ento.com
cc20.status.jasper.com
docs.api.ento.com
internal.status.ento.com
ento.com
ento.com
internal.status.ento.com
cc20.status.jasper.com
ento.com
cc20.status.jasper.com
internal.status.ento.com
cc20.status.jasper.com
itstatus.honegger.ch
internal.status.ento.com
project.ento.com
internal.status.ento.com
*.ento.com
itstatus.honegger.ch
status.cayuse.com
cc20.status.jasper.com
ento.com
itstatus.honegger.ch
ento.com
itstatus.honegger.ch
cc20.status.jasper.com
internal.status.ento.com
internal.status.ento.com
cc20.status.jasper.com
internal.status.ento.com
internal.status.ento.com
itstatus.honegger.ch
cc20.status.jasper.com
itstatus.honegger.ch
cc20.status.jasper.com
internal.status.ento.com
adfs.dev.ento.com
internal.status.ento.com
cc20.status.jasper.com
internal.status.ento.com
internal.status.ento.com
local.dev.au.cdn.ento.com
status.blakeschool.org
itstatus.honegger.ch
internal.status.ento.com
cc20.status.jasper.com
internal.status.ento.com
qa.ento.com
internal.status.ento.com
itstatus.honegger.ch
internal.status.ento.com
ento.com
internal.status.ento.com
ento.com
internal.status.ento.com
status.blakeschool.org
ento.com
docs.api.ento.com
itstatus.honegger.ch
internal.status.ento.com
ento.com
adfs.dev.ento.com
internal.status.ento.com
internal.status.ento.com
itstatus.honegger.ch
internal.status.ento.com
ento.com
Certificate
The complete raw certificate details for docs.api.ento.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISA1TJKfldusr/9ISWPtBfITg5MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMDExNjUyMjZaFw0yNDAyMjkxNjUyMjVaMBwxGjAYBgNVBAMT EWRvY3MuYXBpLmVudG8uY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC AgEAvj2+SXoAE1xY9usKfxQ+2aiixsPTFeXh8CBZxlGSD3DrXq9+e2JvVP8sPHIX juaAFYvq0SnkIsmHeWPvTo4IP8MD5+T/ZXClcBaMn1KHYmWIbk1rmodQootwdNKH EBEUbUZBMM15tpIKoBtIB5gNeWghG/rxT1qtqW+yLES4M3U+gkvupCbbUrNp6rRX ITv5WEMaESnTeqOODmNUGHKGiJH8JvUzk2QbjDyYXf393FBXC6uBGPfa5wCarauy ODtoOlDE3rHAwrWQlqmYDZtsL1nmmwmUQV8XwytXSYTZS/FWLx8Wbf69PC10tPAo 2adol9LVJyuieNrPMHCBOsIl6mN27yYfGE6Wxq73YTEIciCPuNfILOeMBetUqn8o Pbo3160AUTRUCErsqhTDsXYG15VPGRYqvzHNWnnyBRxz+V5yNpp5ALZBIkLQe2Db wKnSmP85W6RXZNO6LhizW4DzNNwc3cgDQn023tufNSHnIAZVEez0W3GXEsJCc7Io hxFwZylum9V+JgwY1BPWRXgMctmGRRWL9/h+Z2DhN9xnhTskNAZOS0oLhKFXUqE0 46T8eXT3u/Ife6zKQHdJrb6H4OD2OBVKU78rWAV2GKLoV3590c05nNOPQPIyOBH6 j4F5yitMPD9OwSOETpx8GfITsj+smccWsUwdZy5uSPVQGjcCAwEAAaOCASAwggEc MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUcoMWDyuD82WdCn9eEOlBdombxDIwHwYD VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0 dHA6Ly9yMy5pLmxlbmNyLm9yZy8wHAYDVR0RBBUwE4IRZG9jcy5hcGkuZW50by5j b20wEwYDVR0gBAwwCjAIBgZngQwBAgEwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJ KoZIhvcNAQELBQADggEBABGQRpDdG7xMWZfzlRh8ToVLKzIsPyMOCtJcnoeO+T3x emtGavANc0K2lPj8UqeaXV+Ixf6iT0CqE9QxkRyUbkwRcvE6B4hxyya6+Y7L0mju rn/djH4K60pFJ5XWRr1donntvUJbpnE4J1tECAgr7SNPgsQxGQxJawn8pdWrnopq jPXu4FmFPBD5mcUZ7iA3j1ARcpBsHkTci3joMhYEQJQtTbvs3BDf4JEwtKTyi30F g3/fM/q4iN/sJhoKFcNhO62nl/eDPxvKDeEJTnwqs12qqyel9TE5FEeyjF7pfYNL E3IlKrBdU2mrZK8DMbXMin2WugYB8jrtI/NdVErUHjo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvj2+SXoAE1xY9usKfxQ+ 2aiixsPTFeXh8CBZxlGSD3DrXq9+e2JvVP8sPHIXjuaAFYvq0SnkIsmHeWPvTo4I P8MD5+T/ZXClcBaMn1KHYmWIbk1rmodQootwdNKHEBEUbUZBMM15tpIKoBtIB5gN eWghG/rxT1qtqW+yLES4M3U+gkvupCbbUrNp6rRXITv5WEMaESnTeqOODmNUGHKG iJH8JvUzk2QbjDyYXf393FBXC6uBGPfa5wCarauyODtoOlDE3rHAwrWQlqmYDZts L1nmmwmUQV8XwytXSYTZS/FWLx8Wbf69PC10tPAo2adol9LVJyuieNrPMHCBOsIl 6mN27yYfGE6Wxq73YTEIciCPuNfILOeMBetUqn8oPbo3160AUTRUCErsqhTDsXYG 15VPGRYqvzHNWnnyBRxz+V5yNpp5ALZBIkLQe2DbwKnSmP85W6RXZNO6LhizW4Dz NNwc3cgDQn023tufNSHnIAZVEez0W3GXEsJCc7IohxFwZylum9V+JgwY1BPWRXgM ctmGRRWL9/h+Z2DhN9xnhTskNAZOS0oLhKFXUqE046T8eXT3u/Ife6zKQHdJrb6H 4OD2OBVKU78rWAV2GKLoV3590c05nNOPQPIyOBH6j4F5yitMPD9OwSOETpx8GfIT sj+smccWsUwdZy5uSPVQGjcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 290187969385709558935830464376742464272441 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-01 16:52:26 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-29 16:52:25 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'docs.api.ento.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 776116321060263648447231700041039507933911951902341949111585657869651642892312731387538284556146058530701753678313917892133683103573079913488520242981868963382592807925623448981581308708927879676817977096654727265982558369509932335765905947297162328429957166564355288742232113127130747174078040978028834078391763240039438685050937556949921751890737943385744553171085006078649543336692851063681123570578474356607387219112056019265458607324830865941370122727429993553845415885514851076176973153547604755709738327967263486155409967529737606252634590367716842165026015902253886477891985599132801048275662449954401510465595031098657303721549115585973954425321491972028584428749436993907955838086668632677904711683932967713432201592267248539396479963630066485292839022556858287898026641997899786668410639961704319505329074460860716024868567719345603525420964395309302672657798378820876368944647521585355944000103388431409872793732950449946180342418034845336284796038446430639491076175520168812112303376881186020709237329203363131575757108568275749043082000526237678849949428939003291801082838964247763009629287389374199276419255481776158317571044514151903658124785344692037329157849122418069225036451443858489303837979999532891874498976311 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7283160f2b83f3659d0a7f5e10e94176899bc432 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.api.ento.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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