*.content.fti-group.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:4d:92:66:d6:f0:de:17:40:8f:90:4c:ce:74:d7:f6 was issued on by Amazon.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.content.fti-group.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:4d:92:66:d6:f0:de:17:40:8f:90:4c:ce:74:d7:f6
Serial Number (int): 16353512187121864893848625846127220726
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 09:e0:c8:0c:19:f7:d9:51:ad:f6:d4:7f:f3:cb:80:7f:e7:bf:0f:2e
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 4d:8f:b2:df:00:e1:3e:fe:4c:95:92:c5:cb:de:e7:71:14:36:a6:ee
Fingerprint (sha256): 5c:4e:81:ba:69:3f:3b:c7:60:f9:f6:72:3b:b3:41:58:cc:fb:fd:b3:bf:31:4b:01:ad:60:0c:34:7e:49:03:15

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.content.fti-group.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.content.fti-group.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.content.fti-group.com
*.mediaportal.content.fti-group.com
*.mediaportal-fti-group.content.fti-group.com
*.upload.content.fti-group.com
*.uploadportal.content.fti-group.com

Other certificates including the domain name fti-group.com

(limited to 100 certificates)
graylog.gcloud.fti-group.com
*.fti-group.com
fti-group.com
factssheets.fti-group.com
facts-help.fti-group.com
tom-assets.gcloud.fti-group.com
test-jenkins.gcloud.fti-group.com
facts-help.fti-group.com
www.fti-group.com
jira.fti-group.com
cis-dynamic.gcloud.fti-group.com
prod-backend-api.gcloud.fti-group.com
www.fti-group.com
*.content.fti-group.com
production-fti-at.gcloud.fti-group.com
maildev.gcloud.fti-group.com
www.fti-group.com
www.fti-group.com
gitlab.fti-group.com
ttproxy-api.gcloud.fti-group.com
staging-loggingdb.gcloud.fti-group.com
turnfriendly-big.fti-group.com
fti-group.com
toran.gcloud.fti-group.com
www.fti-group.com
gitlab.fti-group.com
facts-help.fti-group.com
tom-assets.gcloud.fti-group.com
turnfriendly-fti.fti-group.com
www.karriere.fti-group.com
*.content.fti-group.com
www.karriere.fti-group.com
cis.fti-group.com
production-fti-ch.gcloud.fti-group.com
eperformance.gcloud.fti-group.com
content.fti-group.com
facts-help.fti-group.com
*.gcloud.fti-group.com
www.fti-group.com
www.fti-group.com
cis-dynamic.gcloud.fti-group.com
www.fti-group.com
content.fti-group.com
facts-help.fti-group.com
staging-fti.gcloud.fti-group.com
*.gcloud.fti-group.com
fti-group.com
gitlab.fti-group.com
media.gcloud.fti-group.com
turnfriendly-you.fti-group.com
media.gcloud.fti-group.com
facts-help.fti-group.com
fti-group.com
turnfriendly-fti.fti-group.com
fti-group.com
www.fti-group.com
assets.gcloud.fti-group.com
business-travel.fti-group.com
www.fti-group.com
prod-backend-api.gcloud.fti-group.com
*.content.fti-group.com
cis.fti-group.com
karriere.fti-group.com
karriere.fti-group.com
fti-group.com
media.gcloud.fti-group.com
fti-group.com
ttproxy-api.gcloud.fti-group.com
gitlab.fti-group.com
facts-help.fti-group.com
fti-group.com
factssheets.fti-group.com
eperformance.gcloud.fti-group.com
media.gcloud.fti-group.com
fti-group.com
facts-help.fti-group.com
fti-group.com
b2b-showcase.fti-group.com
business-travel.fti-group.com
facts-help.fti-group.com
cis-dynamic.gcloud.fti-group.com
production-fti-at.gcloud.fti-group.com
fti-group.com
fti-group.com
*.content.fti-group.com
assets.gcloud.fti-group.com
www.fti-group.com
facts-help.fti-group.com
prod-backend-api.gcloud.fti-group.com
www.fti-group.com
fti-group.com
fti-group.com
turnfriendly-big.fti-group.com
turnfriendly-you.fti-group.com
*.gcloud.fti-group.com
ttproxy-api.gcloud.fti-group.com
www.fti-group.com
www.fti-group.com
facts-help.fti-group.com
sbc-deg01.fti-group.comsbc-deg01.fti-group.com

Certificate

The complete raw certificate details for *.content.fti-group.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIQDE2SZtbw3hdAj5BMznTX9jANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODExMTUwMDAwMDBaFw0xOTEyMTUx
MjAwMDBaMCIxIDAeBgNVBAMMFyouY29udGVudC5mdGktZ3JvdXAuY29tMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv88mSnT8h6NYNtE356H+TJx2IiGJ
rlQRAIxr060EyzEfjgOkNilAZv6r9gd9BJOnokxwrPj74TDmmmdzZCUB0uFJ+E3c
t0VViEwl4G59vxH+WddpG95foVSX+7gxt8YC5jxy3qO8Z9Zus8yJYuCW2PEYrTDP
w45hJCh36MzmhgsHP0khGKqjyCtKoYqolze5I1taZOAMxP52cfwgC9q0PM3ONF3i
uTRFrjUA2UYtFVp7yjplz10vPTUUW5xxWqWdYg0Ri7paP+qN0G3r4aOwfl46fHxk
tCiByi410qNJgAiq+MyDkJEFwtwxEtHqbD+BvWDzL9GDFDsJwyDgdRDSZwIDAQAB
o4ICLTCCAikwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0O
BBYEFAngyAwZ99lRrfbUf/PLgH/nvw8uMIG+BgNVHREEgbYwgbOCFyouY29udGVu
dC5mdGktZ3JvdXAuY29tgiMqLm1lZGlhcG9ydGFsLmNvbnRlbnQuZnRpLWdyb3Vw
LmNvbYItKi5tZWRpYXBvcnRhbC1mdGktZ3JvdXAuY29udGVudC5mdGktZ3JvdXAu
Y29tgh4qLnVwbG9hZC5jb250ZW50LmZ0aS1ncm91cC5jb22CJCoudXBsb2FkcG9y
dGFsLmNvbnRlbnQuZnRpLWdyb3VwLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6
Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAX
MAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUF
BzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUH
MAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAM
BgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUA
A4IBAQBKEI8MxW/sZQoTHlofjY+LPjNcqz9uF+yaOvj7Mb9JqFSlD9psEj0IKGF7
bBM/6dZIt2mnnpCseNE6iSg42TKjTYNd62+LDdKZSgkvriBcntPsQXUqczXCWYSU
0s+F8v7tECRUeIH2VqQdyMhEoQlecf9vtABZR19KYYwFbWeTMTcm0Rj7fkcr7ex3
Gn2V/rVvNvbkuQ9edknbvRFIAhc4sXN8oJ3OGTBtW8smG5ycz4fOM27+dSWkw4V7
JHLm1G5VXUAaI52NjrwYgH9OT1ksxcJN2fKcJvUDk66NAZBeWdhjsVooQ50J5oLD
zFyKNQUJHrsUB/wgI+OZSAbDXrUd
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv88mSnT8h6NYNtE356H+
TJx2IiGJrlQRAIxr060EyzEfjgOkNilAZv6r9gd9BJOnokxwrPj74TDmmmdzZCUB
0uFJ+E3ct0VViEwl4G59vxH+WddpG95foVSX+7gxt8YC5jxy3qO8Z9Zus8yJYuCW
2PEYrTDPw45hJCh36MzmhgsHP0khGKqjyCtKoYqolze5I1taZOAMxP52cfwgC9q0
PM3ONF3iuTRFrjUA2UYtFVp7yjplz10vPTUUW5xxWqWdYg0Ri7paP+qN0G3r4aOw
fl46fHxktCiByi410qNJgAiq+MyDkJEFwtwxEtHqbD+BvWDzL9GDFDsJwyDgdRDS
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16353512187121864893848625846127220726
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.content.fti-group.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24213665510425987688466637950183742700819464737094335070093190290105647335812692933079157328211448346714033084162951932925916129958215102643968625274029998659088413990748594050341235889878015942034116428396998018960270506289850982724699996324418342075279138975240810534602873173035700030688800387093828534815403273029726705415471939274134496545175525907170279008463112728901071496282468564383513303890463394820565134918476218799585571496283992854214987703531220295061806380980333475337258626929857706759638612462583938568580321890493744784105190591994483666218132448268269309561025845246896622451316964947699436671591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09e0c80c19f7d951adf6d47ff3cb807fe7bf0f2e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (182 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.content.fti-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediaportal.content.fti-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediaportal-fti-group.content.fti-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upload.content.fti-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uploadportal.content.fti-group.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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