*.ghn.vn
Issued by Certum Domain Validation CA SHA2
About this certificate
This digital certificate with serial number 0a:35:ad:56:26:9e:b8:f5:97:2a:e5:7f:2f:40:09:24 was issued on by Unizeto Technologies S.A..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.ghn.vn,C=VN,1.2.840.113549.1.9.1=#0c12626c756562697440626c75656269742e766e
Unizeto Technologies S.A.
Organization:
Unizeto Technologies S.A.
Organization unit: Certum Certification Authority
Organization unit: Certum Certification Authority
Country:
PL
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:35:ad:56:26:9e:b8:f5:97:2a:e5:7f:2f:40:09:24Serial Number (int): 13570987373787226657554703905374341412
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: f3:5d:ba:bd:80:9d:31:15:78:4d:32:6f:7a:2e:e0:6f:22:af:2d:7f
AuthorityKeyId: e5:31:ad:bf:3a:11:96:f4:83:bc:50:3c:d4:b7:90:9b:90:ee:de:25
Fingerprint (sha1): f2:c6:9d:c9:01:88:58:43:24:d5:9c:3a:09:8e:ed:3a:37:78:5a:8f
Fingerprint (sha256): 5c:b3:2c:fb:40:48:3b:f3:a9:15:ed:40:9a:f3:1c:88:94:90:41:18:13:59:5c:1d:41:f1:b6:1e:28:23:03:e2
Issuing Certificate URL: http://repository.certum.pl/dvcasha2.cer
Revocation information
OCSP Server: http://dvcasha2.ocsp-certum.comCRL Distribution Point: http://crl.certum.pl/dvcasha2.crl
Check the revocation status for certificate *.ghn.vn
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.ghn.vn
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.ghn.vn
ghn.vn
ghn.vn
Other certificates including the domain name ghn.vn
(limited to 100 certificates)
ghn.vn
ghn.vn
phukien.ghn.vn
ghn.vn
ghn.vn
ghn.vn
ghn.vn
ghn.vn
ghn.vn
smartlog.ghn.vn
giaohangnhanh.vn
*.ghn.vn
*.ghn.vn
*.ghn.vn
*.ghn.vn
ontime.ghn.vn
www.ghn.vn
ghn.vn
smartlog.ghn.vn
webadmin.ghn.vn
ghn.vn
smartlog.ghn.vn
ghn.vn
smartlog.ghn.vn
ghn.vn
ghn.vn
ghn.vn
smartlog.ghn.vn
ghn.vn
*.ghn.vn
*.ghn.vn
smartlog.ghn.vn
ghn.vn
phucloi.ghn.vn
*.ghn.vn
smartlog.ghn.vn
ghn.vn
tgh.ghn.vn
ghn.vn
ghn.vn
tgh.ghn.vn
tgh.ghn.vn
ghn.vn
ghn.vn
phukien.ghn.vn
ghn.vn
ghn.vn
ghn.vn
ghn.vn
ghn.vn
ghn.vn
smartlog.ghn.vn
giaohangnhanh.vn
*.ghn.vn
*.ghn.vn
*.ghn.vn
*.ghn.vn
ontime.ghn.vn
www.ghn.vn
ghn.vn
smartlog.ghn.vn
webadmin.ghn.vn
ghn.vn
smartlog.ghn.vn
ghn.vn
smartlog.ghn.vn
ghn.vn
ghn.vn
ghn.vn
smartlog.ghn.vn
ghn.vn
*.ghn.vn
*.ghn.vn
smartlog.ghn.vn
ghn.vn
phucloi.ghn.vn
*.ghn.vn
smartlog.ghn.vn
ghn.vn
tgh.ghn.vn
ghn.vn
ghn.vn
tgh.ghn.vn
tgh.ghn.vn
ghn.vn
Certificate
The complete raw certificate details for *.ghn.vn in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgIQCjWtViaeuPWXKuV/L0AJJDANBgkqhkiG9w0BAQsFADCB hTELMAkGA1UEBhMCUEwxIjAgBgNVBAoTGVVuaXpldG8gVGVjaG5vbG9naWVzIFMu QS4xJzAlBgNVBAsTHkNlcnR1bSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEpMCcG A1UEAxMgQ2VydHVtIERvbWFpbiBWYWxpZGF0aW9uIENBIFNIQTIwHhcNMTkwODI4 MDQzOTI4WhcNMjEwODI3MDQzOTI4WjBDMREwDwYDVQQDDAgqLmdobi52bjELMAkG A1UEBhMCVk4xITAfBgkqhkiG9w0BCQEWEmJsdWViaXRAYmx1ZWJpdC52bjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALtfWpZys5BAK9bFWyTzmCohLXdI 8S/kNTIQPo7MqsdcrLRcijqHhFx3vcIaMXhSpNt9FRHSRWLCdk35EEDWsWRFnf5n EP2GGFaush41P5+BMOGo2i+tp6+hDJyTIJqs+m6K8KYa5vaBo70wWLlq0RSrtQKl O16H96udBl+89uzS0Bu9F0i6RMiJ3Z9QwL4qCE3uXNP3T4dTPpAXHY9pGHJV/1vE 2TH6yjDMXhe3fMA9jBS7ZkTEAJpxrfiVWeqgHHOJzkET85skSQpPSR7lNZTlYKur 75or5dv0ZRorp6ukoB8NfXFN9aypyMPDX6kUwAP1mtvDJyI/4vy23iWQTskCAwEA AaOCAcYwggHCMAwGA1UdEwEB/wQCMAAwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDov L2NybC5jZXJ0dW0ucGwvZHZjYXNoYTIuY3JsMHEGCCsGAQUFBwEBBGUwYzArBggr BgEFBQcwAYYfaHR0cDovL2R2Y2FzaGEyLm9jc3AtY2VydHVtLmNvbTA0BggrBgEF BQcwAoYoaHR0cDovL3JlcG9zaXRvcnkuY2VydHVtLnBsL2R2Y2FzaGEyLmNlcjAf BgNVHSMEGDAWgBTlMa2/OhGW9IO8UDzUt5CbkO7eJTAdBgNVHQ4EFgQU8126vYCd MRV4TTJvei7gbyKvLX8wHQYDVR0SBBYwFIESZHZjYXNoYTJAY2VydHVtLnBsMEsG A1UdIAREMEIwCAYGZ4EMAQIBMDYGCyqEaAGG9ncCBQEDMCcwJQYIKwYBBQUHAgEW GWh0dHBzOi8vd3d3LmNlcnR1bS5wbC9DUFMwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDAbBgNVHREEFDASgggqLmdobi52boIG Z2huLnZuMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAv 9y+31xGhr4KqONuQWaTIVcCfNrzOXhgPqofLDwNlge+4dh1T95nnfSu+4Jj+Ezqe sU/VvQD02pWtDNcesy2zzpb1qIUlrk9bBNCtj4+DLQAyRCaaDcQDyipFIcB7XoJF lO7pQstb3HeAMOQfsvaLSRRYhoDGRBWtH8TzHDyAh527FX9lMWTvZOENmNhyzggn vwnOqg6cWn3F64KfmiaCeR96ONJ5zDjhxAu7pClIHihjrqPWJ/PZdkbywaG+3L3a KGuRiRefm/S+9fcZbz0L9rM3YUWtQiWGBAaGKUMJviNvhZbxJMUB/25ANaGcuCdc 8RYdXV5N9Mni1wMWOzkh -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu19alnKzkEAr1sVbJPOY KiEtd0jxL+Q1MhA+jsyqx1ystFyKOoeEXHe9whoxeFKk230VEdJFYsJ2TfkQQNax ZEWd/mcQ/YYYVq6yHjU/n4Ew4ajaL62nr6EMnJMgmqz6borwphrm9oGjvTBYuWrR FKu1AqU7Xof3q50GX7z27NLQG70XSLpEyIndn1DAvioITe5c0/dPh1M+kBcdj2kY clX/W8TZMfrKMMxeF7d8wD2MFLtmRMQAmnGt+JVZ6qAcc4nOQRPzmyRJCk9JHuU1 lOVgq6vvmivl2/RlGiunq6SgHw19cU31rKnIw8NfqRTAA/Wa28MnIj/i/LbeJZBO yQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13570987373787226657554703905374341412 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unizeto Technologies S.A.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certum Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certum Domain Validation CA SHA2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-28 04:39:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-27 04:39:28 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ghn.vn' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VN' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23653583768596217835888734486992210296963185519930653961510815846683499952542666707484157212698533519378917258430435077348495534035657079484712628685217207991952089882360894290203016547476793725191010582674679189766959049757445987167810125407599964611419329600413420121666127979497023465618242650303489431289028055507000238043214124105696786525520086966495260007243445047519857688306918869015242505060905494870527981362834612507406170676327318998391174107686608550174707242608601424540506514904518225181727734454683755231634171395254194756842286173710107550723098882429772853963266637888137905331546477273421687312073 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.certum.pl/dvcasha2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://dvcasha2.ocsp-certum.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.certum.pl/dvcasha2.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e531adbf3a1196f483bc503cd4b7909b90eede25 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f35dbabd809d3115784d326f7a2ee06f22af2d7f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.616.1.113527.2.5.1.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.certum.pl/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ghn.vn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghn.vn' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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