fix.accesswca.com

- Wells Fargo & Company -

Issued by Wells Fargo Public Trust Certification Authority 01 G2

About this certificate

This digital certificate with serial number 0c:3e:f9:1b:fd:86:21:26:7f:70:2c:11:ff:9f:ed:57 was issued on by Wells Fargo & Company.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wells Fargo & Company

Organization: Wells Fargo & Company
State / Province: California
Locality: San Francisco
Country: US

Wells Fargo & Company

Organization: Wells Fargo & Company
Organization unit: Organization Validated TLS
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:3e:f9:1b:fd:86:21:26:7f:70:2c:11:ff:9f:ed:57
Serial Number (int): 16277710892261707031769013679091084631
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f8:f1:cc:6d:0c:1c:7c:f9:c1:94:10:70:d7:66:32:e9:82:1a:9e:dc
AuthorityKeyId: 39:13:9e:e1:41:d2:3a:45:0b:38:80:60:af:b5:21:41:7c:01:89:7d

Fingerprint (sha1): 7b:54:f5:0b:0b:11:34:40:b6:47:52:ba:50:b0:06:50:11:70:88:15
Fingerprint (sha256): 62:de:cd:aa:7d:f0:09:ac:46:40:fa:c2:1d:26:e2:01:52:d6:28:52:63:e0:79:e0:d1:96:21:c3:b9:23:75:09

Issuing Certificate URL: http://cacerts.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crt

Revocation information

OCSP Server: http://statush.digitalcertvalidation.com
CRL Distribution Point: http://cdph.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crl

Check the revocation status for certificate fix.accesswca.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fix.accesswca.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fix.accesswca.com
wcafix.onlinemyaccounts.com
wcafix.getmyaccounts.com
wcafix.ctslink.com
wcafix.securitieslink.com
wcafix.cdolink.com
wcafix.servicerconnect.com
wcafix.lcmatrix.com
wcafix.wystar.com
wcafix.myleasingsource.com
wcafix.currencyteller.com
wca.wwwfix.ctslink.com
wca.directfix.ctslink.com
wca.wwwfix.securitieslink.com
wca.wwwfix.cdolink.com
wca.wwwfix.servicerconnect.com

Other certificates including the domain name accesswca.com

(limited to 100 certificates)
wellswcapa.sec.wellsfargo.com
wellswcapffix.sec.wellsfargo.com
fix.accesswca.com
wifpt-uat.accesswca.com
www.accesswca.com
wifpt-fix.accesswca.com
www.accesswca.com
fs.accesswca.com
wellspauat.wellsfargo.com
wellspafix.wellsfargo.com
fix.accesswca.com
fs.accesswca.com
adminfix.accesswca.com
wellspauat.wellsfargo.com
fix.accesswca.com
ciamfix.wellsfargo.com
fsuat.accesswca.com
fs.accesswca.com
adminfix.accesswca.com
wellspafix.wellsfargo.com
dev.accesswca.com
fix.accesswca.com
fsfix.accesswca.com
www.accesswca.com
dev.accesswca.com
www.accesswca.com
wifpt-fix.accesswca.com
uat.accesswca.com
adminuat.accesswca.com
www.accesswca.com
wellspafix.wellsfargo.com
sit.accesswca.com
fix.accesswca.com
fix.accesswca.com
www.accesswca.com
www.accesswca.com
fs.accesswca.com
wifpt-uat.accesswca.com
fix.accesswca.com
fs.accesswca.com
wellspauat.wellsfargo.com
fsfix.accesswca.com
dev.accesswca.com
fsuat.accesswca.com
wifpt-uat.accesswca.com
uat.accesswca.com
fix.accesswca.com
adminfix.accesswca.com
fsuat.accesswca.com
wellspauat.wellsfargo.com
www.accesswca.com
www.accesswca.com
fs.accesswca.com
www.accesswca.com
fs.accesswca.com
wifpt-uat.accesswca.com
uat.accesswca.com
fs.accesswca.com
admin.accesswca.com
fsuat.accesswca.com
sit.accesswca.com
fssit.accesswca.com
adminfix.accesswca.com
wifpt.accesswca.com
sit.accesswca.com
fs.accesswca.com
www.accesswca.com
fsfix.accesswca.com
fs.accesswca.com
fsfix.accesswca.com
fsuat.accesswca.com
fssit.accesswca.com
fix.accesswca.com
wifpt.accesswca.com
www.accesswca.com
adminfix.accesswca.com
www.accesswca.com
admindev.accesswca.com
fsuat.accesswca.com
www.accesswca.com
fsfix.accesswca.com
wellswcapauat.sec.wellsfargo.com
wellspafix.wellsfargo.com
fix.accesswca.com
wifpt-fix.accesswca.com
wifpt-fix.accesswca.com
wellswcapauat.sec.wellsfargo.com
fsuat.accesswca.com
wellspauat.wellsfargo.com
fix.accesswca.com
sit.accesswca.com
admin.accesswca.com
www.accesswca.com
wellspa.wellsfargo.com
fs.accesswca.com
adminfix.accesswca.com
dev.accesswca.com
fix.accesswca.com
www.accesswca.com
fsfix.accesswca.com

Certificate

The complete raw certificate details for fix.accesswca.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun8Awl7QLtSy1EjNCMPM
Lu37J5VLqIGwYJ9BXRiL+GEooMsVbexlMWEImciCwZC0I3upAO2auwWwjziAbook
573hmoop+8J0sgmBJYm2NY/oUGuCmzhkLvyRlLZzDojVK7HbbFk0H09SDd2imk8y
Wkmnkq2HAnbb2FLftAJUp7D1xWcGz2FgSfWCu47gphz55iV3xRAT0lAVC/OTS02I
ogl6wWfzM+lh/9dE2AhL1Ii84ppuXeVmE95oia51lW7h2c60pbtkas4fvmk+pL3M
waWjU+BOcLG6v5nWY9g1zznrsW7W6L37pbV4l85TOE/LNwEjPVzS6H4VQQPLDFns
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16277710892261707031769013679091084631
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wells Fargo & Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Organization Validated TLS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wells Fargo Public Trust Certification Authority 01 G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wells Fargo & Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fix.accesswca.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23542952220309452175812871348772338993444124949024532730157995550939101444723919098685755446157838695545485315654277136642209976008009106220587092904324271421872222647475927533958100404584022153972130296995304849838235657245741434284865168273561191312387299086348338910960076122253812366358790778491982401723140252793419604407489007091336366353483444909176920169411138758013141152333666552626196145327456298656159532196403511391458300146285866713592387471048223290497343089091820558465506452565369341143023118497821727427666954885669021835574969304980756858008896693314124376473055912857460823923507380343556863028453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 39139ee141d23a450b388060afb521417c01897d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8f1cc6d0c1c7cf9c1941070d76632e9821a9edc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (406 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fix.accesswca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcafix.onlinemyaccounts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcafix.getmyaccounts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcafix.ctslink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcafix.securitieslink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcafix.cdolink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcafix.servicerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcafix.lcmatrix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcafix.wystar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcafix.myleasingsource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcafix.currencyteller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wca.wwwfix.ctslink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wca.directfix.ctslink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wca.wwwfix.securitieslink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wca.wwwfix.cdolink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wca.wwwfix.servicerconnect.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdph.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (163 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://statush.digitalcertvalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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