*.genai-s.samsungsds.com

Issued by AlphaSSL CA - SHA256 - G4

About this certificate

This digital certificate with serial number 42:66:85:a6:30:74:9e:8b:39:d4:1a:8a was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.genai-s.samsungsds.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 42:66:85:a6:30:74:9e:8b:39:d4:1a:8a
Serial Number (int): 20549952222202794542181390986
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: b7:08:fa:c7:3b:9f:1c:da:06:9e:c5:9a:dd:88:da:1f:73:90:8e:4b
AuthorityKeyId: 4f:cb:ac:a8:c2:ef:ab:dd:83:6f:6b:bf:ce:98:3d:5c:58:25:76:15

Fingerprint (sha1): 85:4d:c6:9c:10:19:e7:c7:4a:49:c8:db:fc:75:f6:a1:f4:d3:e1:15
Fingerprint (sha256): 5a:a5:6b:12:c3:1d:27:f7:be:1a:89:8c:74:06:6c:34:db:05:a7:bd:b6:c0:bb:d3:42:89:f7:27:c9:16:46:77

Issuing Certificate URL: http://secure.globalsign.com/cacert/alphasslcasha256g4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/alphasslcasha256g4
CRL Distribution Point: http://crl.globalsign.com/alphasslcasha256g4.crl

Check the revocation status for certificate *.genai-s.samsungsds.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.genai-s.samsungsds.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.genai-s.samsungsds.com
genai-s.samsungsds.com

Other certificates including the domain name samsungsds.com

(limited to 100 certificates)
support100.cdnetworks.net
devplus.samsungsds.com
support100.cdnetworks.net
nexprimehcmstg.samsungsds.com
support100.cdnetworks.net
support100.cdnetworks.net
*.brightics.samsungsds.com
partner.samsungsds.com
support100.cdnetworks.net
images.mkt-email.samsungsds.com
imperva.com
support6.cdnetworks.net
image.samsungsds.com
support100.cdnetworks.net
*.samsungsds.com
support100.cdnetworks.net
support100.cdnetworks.net
*.genai-fin.samsungsds.com
us.brighticsiot.samsungsds.com
support100.cdnetworks.net
support100.cdnetworks.net
*.samsungsds.com
support100.cdnetworks.net
support100.cdnetworks.net
support100.cdnetworks.net
*.samsungsds.com
*.samsungsds.com
stg-us.brighticsiot.samsungsds.com
support99.cdnetworks.net
support100.cdnetworks.net
*.fabrix-s.samsungsds.com
support100.cdnetworks.net
support100.cdnetworks.net
*.fabrix-e.samsungsds.com
agmsds.samsungsds.com
support100.cdnetworks.net
support99.cdnetworks.net
support100.cdnetworks.net
image.samsungsds.com
image.samsungsds.com
multicampus.com
support100.cdnetworks.net
support99.cdnetworks.net
imperva.com
*.samsungsds.com
ncp-nexsign.samsungsds.com
support100.cdnetworks.net
support100.cdnetworks.net
multicampus.com
partner-network.samsungsds.com
support100.cdnetworks.net
stg-us.brighticsiot.samsungsds.com
image.samsungsds.com
support100.cdnetworks.net
partner.samsungsds.com
support100.cdnetworks.net
support100.cdnetworks.net
*.samsungsds.com
smart-safety.samsungsds.com
support6.cdnetworks.net
support99.cdnetworks.net
image.samsungsds.com
*.samsungsds.com
support100.cdnetworks.net
support99.cdnetworks.net
gdci.devops.samsungsds.com
support100.cdnetworks.net
imperva.com
support6.cdnetworks.net
support100.cdnetworks.net
support100.cdnetworks.net
mypc-disk.samsungsds.com
support100.cdnetworks.net
support100.cdnetworks.net
support100.cdnetworks.net
support100.cdnetworks.net
support100.cdnetworks.net
support99.cdnetworks.net
support100.cdnetworks.net
support100.cdnetworks.net
ncp-nexsign.samsungsds.com
image.samsungsds.com
support99.cdnetworks.net
cloud.samsungsds.com
mypc-disk.samsungsds.com
imperva.com
support99.cdnetworks.net
support99.cdnetworks.net
*.genai-s.samsungsds.com
rnd365sw.samsungsds.com
support100.cdnetworks.net
support100.cdnetworks.net
support100.cdnetworks.net
cloud.samsungsds.com
lookin.samsungsds.com
support100.cdnetworks.net
lookin.samsungsds.com
support100.cdnetworks.net
support100.cdnetworks.net
support100.cdnetworks.net

Certificate

The complete raw certificate details for *.genai-s.samsungsds.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgIMQmaFpjB0nos51BqKMA0GCSqGSIb3DQEBCwUAMEwxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB
bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEc0MB4XDTIzMTIwODA0MjEzMFoXDTI1MDEw
ODA0MjEyOVowIzEhMB8GA1UEAwwYKi5nZW5haS1zLnNhbXN1bmdzZHMuY29tMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNejDedalW4SjvPbx6Fly7pr
DVINvy61MTaN8Oshy5PBpjEGjh3dc69HIGlWjThi5NbQzi15DcLG5C2VQKX/paTt
sgTb0+ARGY/RA8geYPSkjFLSWNky6zLsBldLk2DFPVryyTtjpataCc7xFilTJwiV
w5my9teEWm5Yf2e/qeWx/dJ48zjFntc6TejegULOWg75tuTzTVWK99D6yZvypBdf
D2AMgtZc59UQM8HCcpbUiPr5onqMR9w8H9JGxPyzI5vUUMh5P/EsPhgTXAWrt+XU
j5Xpp9Lv4fBy3hAwnZuk1lG1SDzUPBJ+Xp35fpLnvRuST8/iw8FN91Y2XvHUywID
AQABo4ICBTCCAgEwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwgZMGCCsG
AQUFBwEBBIGGMIGDMEYGCCsGAQUFBzAChjpodHRwOi8vc2VjdXJlLmdsb2JhbHNp
Z24uY29tL2NhY2VydC9hbHBoYXNzbGNhc2hhMjU2ZzQuY3J0MDkGCCsGAQUFBzAB
hi1odHRwOi8vb2NzcC5nbG9iYWxzaWduLmNvbS9hbHBoYXNzbGNhc2hhMjU2ZzQw
VwYDVR0gBFAwTjAIBgZngQwBAgEwQgYKKwYBBAGgMgoBAzA0MDIGCCsGAQUFBwIB
FiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzBBBgNVHR8E
OjA4MDagNKAyhjBodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2FscGhhc3NsY2Fz
aGEyNTZnNC5jcmwwOwYDVR0RBDQwMoIYKi5nZW5haS1zLnNhbXN1bmdzZHMuY29t
ghZnZW5haS1zLnNhbXN1bmdzZHMuY29tMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjAfBgNVHSMEGDAWgBRPy6yowu+r3YNva7/OmD1cWCV2FTAdBgNVHQ4E
FgQUtwj6xzufHNoGnsWa3YjaH3OQjkswEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJ
KoZIhvcNAQELBQADggEBAB1Z04R5EUWksQRFQ5S9swdr0mctyBGB+wTH8jYisrnM
/Sntl7unNBBBQB0IUnM/7pvej0QGZmhxQibfVCEQj5gdyXMA+EJp4xg+tjKyMfwP
O+mYAcBwsxAhBpj4C3+kGmgBOD6D0MWfJ7A3cYF/XzrqpTa/TTr0BnxMFlQuNbEy
j+ILGAAz37R8p35H0c503z4UbJhl/dH6j8ouQr4HAyk26qG/NKj98uspGhyEuuCB
Yxr1GzP5RHAmCb93x6O8TLwP85BjdRrFdBzPa+C21CUJBy5A71l0wm+Uvhug2sFB
b6/5M3Cjbz8wFiw0go6lLKF4xiFyTdl+ne9zRTqEFyQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNejDedalW4SjvPbx6Fl
y7prDVINvy61MTaN8Oshy5PBpjEGjh3dc69HIGlWjThi5NbQzi15DcLG5C2VQKX/
paTtsgTb0+ARGY/RA8geYPSkjFLSWNky6zLsBldLk2DFPVryyTtjpataCc7xFilT
JwiVw5my9teEWm5Yf2e/qeWx/dJ48zjFntc6TejegULOWg75tuTzTVWK99D6yZvy
pBdfD2AMgtZc59UQM8HCcpbUiPr5onqMR9w8H9JGxPyzI5vUUMh5P/EsPhgTXAWr
t+XUj5Xpp9Lv4fBy3hAwnZuk1lG1SDzUPBJ+Xp35fpLnvRuST8/iw8FN91Y2XvHU
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20549952222202794542181390986
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 04:21:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-08 04:21:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.genai-s.samsungsds.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23839135867390141170574927527363430941167802111218504207745997980368284017935514043548011319949709111874528901135419376719454098799334971692438901001975518403956104242498647067623412349785180119865517849370214799931417460814905895089616074200193323140451093869867940003445210004568162624099526421318307677015997200525970505410837531890955551624385705704575920036207756063857899570257936848524231941742123433708736632543289779156873482950580080067636255191380892283637534173792464576294374791814826300809044433457915601151670809203707052737609950349075500189447761616966641611816918975842702723847332703655003279185099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/alphasslcasha256g4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/alphasslcasha256g4'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/alphasslcasha256g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.genai-s.samsungsds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genai-s.samsungsds.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4fcbaca8c2efabdd836f6bbfce983d5c58257615
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b708fac73b9f1cda069ec59add88da1f73908e4b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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