woodmagazine.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 0d:b2:3f:a6:7f:5c:ff:f6:9b:d0:cd:c6:4f:75:e2:54 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=woodmagazine.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0d:b2:3f:a6:7f:5c:ff:f6:9b:d0:cd:c6:4f:75:e2:54Serial Number (int): 18205483769120139264039912962226774612
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 1d:1d:99:d7:c5:d6:11:85:65:b6:be:0d:a6:98:9d:44:07:dd:a1:d7
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 6c:16:e9:36:9b:75:6e:60:15:ce:f8:90:41:a2:dd:eb:3d:2f:ce:64
Fingerprint (sha256): 65:cc:87:ea:1e:ac:b1:8b:08:77:56:c3:25:fa:ef:0b:2b:a0:12:e1:a4:f1:27:b5:d3:23:4c:53:09:6d:05:32
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate woodmagazine.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for woodmagazine.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
woodmagazine.com
*.woodmagazine.com
*.woodmagazine.com
Other certificates including the domain name woodmagazine.com
(limited to 100 certificates)
payments.meredith.com
qa4.ugc.marthastewart.com
woodmagazine.com
*.secure.meredith.com
secure.meredith.com
my.meredith.com
sli.dailypaws.com
sli.dailypaws.com
a-ue1.mydomaine.com
payments.meredith.com
qa4.ugc.marthastewart.com
specialoffers.meredith.com
sli.dailypaws.com
*.agriculture.com
dev.secure.meredith.com
sli.dailypaws.com
secure.meredith.com
mywedding.com
secure.meredith.com
mywedding.com
qa2.ugc.marthastewart.com
a-uw2.mydomaine.com
mdp.api.meredith.com
woodmagazine.com
secure.meredith.com
a-ue1.mydomaine.com
qa4.ugc.marthastewart.com
ugc.marthastewart.com
secure.meredith.com
socialize.woodmagazine.com
test.payments.meredith.com
secure.meredith.com
sli.dailypaws.com
a-ue1.mydomaine.com
qa3.ugc.marthastewart.com
ugc.marthastewart.com
sli.dailypaws.com
test.secure.meredith.com
qa3.ugc.marthastewart.com
links.allrecipes.com
sli.dailypaws.com
agriculture.com
cr-iframe.magazine.store
*.woodmagazine.com
secure.meredith.com
payments.meredith.com
*.secure.meredith.com
secure.meredith.com
qa3.ugc.marthastewart.com
www.agriculture.com
cr-iframe.magazine.store
agriculture.com
api.meredith.com
payments.meredith.com
ugc.marthastewart.com
qa2.ugc.marthastewart.com
*.secure.meredith.com
secure.meredith.com
ugc.marthastewart.com
my.meredith.com
test.payments.meredith.com
qa3.ugc.marthastewart.com
sli.dailypaws.com
my.woodmagazine.com
secure.meredith.com
sli.dailypaws.com
qa3.ugc.marthastewart.com
sli.dailypaws.com
cr-iframe.magazine.store
secure.meredith.com
mywedding.com
woodmagazine.com
secure.woodmagazine.com
*.agriculture.com
sli.dailypaws.com
qa2.ugc.marthastewart.com
qa2.ugc.marthastewart.com
woodmagazine.com
*.secure.meredith.com
my.woodmagazine.com
sli.dailypaws.com
ugc.marthastewart.com
a-ue1.shape.com
origin-cr-iframe.magazine.store
woodmagazine.com
a-ue1.mydomaine.com
qa3.ugc.marthastewart.com
secure.meredith.com
qa3.ugc.marthastewart.com
*.health.com
woodmagazine.com
qa2.ugc.marthastewart.com
qa4.ugc.marthastewart.com
secure.woodmagazine.com
my.meredith.com
*.secure.meredith.com
*.secure.meredith.com
secure.meredith.com
a-ue1.shape.com
dev.secure.meredith.com
qa4.ugc.marthastewart.com
woodmagazine.com
*.secure.meredith.com
secure.meredith.com
my.meredith.com
sli.dailypaws.com
sli.dailypaws.com
a-ue1.mydomaine.com
payments.meredith.com
qa4.ugc.marthastewart.com
specialoffers.meredith.com
sli.dailypaws.com
*.agriculture.com
dev.secure.meredith.com
sli.dailypaws.com
secure.meredith.com
mywedding.com
secure.meredith.com
mywedding.com
qa2.ugc.marthastewart.com
a-uw2.mydomaine.com
mdp.api.meredith.com
woodmagazine.com
secure.meredith.com
a-ue1.mydomaine.com
qa4.ugc.marthastewart.com
ugc.marthastewart.com
secure.meredith.com
socialize.woodmagazine.com
test.payments.meredith.com
secure.meredith.com
sli.dailypaws.com
a-ue1.mydomaine.com
qa3.ugc.marthastewart.com
ugc.marthastewart.com
sli.dailypaws.com
test.secure.meredith.com
qa3.ugc.marthastewart.com
links.allrecipes.com
sli.dailypaws.com
agriculture.com
cr-iframe.magazine.store
*.woodmagazine.com
secure.meredith.com
payments.meredith.com
*.secure.meredith.com
secure.meredith.com
qa3.ugc.marthastewart.com
www.agriculture.com
cr-iframe.magazine.store
agriculture.com
api.meredith.com
payments.meredith.com
ugc.marthastewart.com
qa2.ugc.marthastewart.com
*.secure.meredith.com
secure.meredith.com
ugc.marthastewart.com
my.meredith.com
test.payments.meredith.com
qa3.ugc.marthastewart.com
sli.dailypaws.com
my.woodmagazine.com
secure.meredith.com
sli.dailypaws.com
qa3.ugc.marthastewart.com
sli.dailypaws.com
cr-iframe.magazine.store
secure.meredith.com
mywedding.com
woodmagazine.com
secure.woodmagazine.com
*.agriculture.com
sli.dailypaws.com
qa2.ugc.marthastewart.com
qa2.ugc.marthastewart.com
woodmagazine.com
*.secure.meredith.com
my.woodmagazine.com
sli.dailypaws.com
ugc.marthastewart.com
a-ue1.shape.com
origin-cr-iframe.magazine.store
woodmagazine.com
a-ue1.mydomaine.com
qa3.ugc.marthastewart.com
secure.meredith.com
qa3.ugc.marthastewart.com
*.health.com
woodmagazine.com
qa2.ugc.marthastewart.com
qa4.ugc.marthastewart.com
secure.woodmagazine.com
my.meredith.com
*.secure.meredith.com
*.secure.meredith.com
secure.meredith.com
a-ue1.shape.com
dev.secure.meredith.com
Certificate
The complete raw certificate details for woodmagazine.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEczCCA1ugAwIBAgIQDbI/pn9c//ab0M3GT3XiVDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTIxNDAwMDAwMFoXDTI1MDExMDIzNTk1OVowGzEZ MBcGA1UEAxMQd29vZG1hZ2F6aW5lLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJJkJiSQ5iY1VJbUuX/OJcatLd3E0C8PcGGLiNDXNK7o4Ta7zLag WQDD7xgSZcemoKw8tcF9bTjwTafrh5s3NB9JmdijWH5yfv+oN4/7A3ZVFMfsrOWm l9Z06H6ah8ISxaYhCT7uJVJ+sZXKLb5sa/WuQxvU3lLcI4/xXU2nyClcjdwVXmF7 fkvFniRBLk0lWaNdoKZV06XKV6MkZpL+3z+cUMDfEv7BxjML9IYvhdF8IVwo0PgJ pRQpCu+Wy5GNZ+ZFDd5mVLcpUXntpaplFZTJWy1oGtWra1v8MjGu48wIhjOCBr6f MQX3S0ROE5BRvjVqg3tL5eHy9wFWXCqwNgkCAwEAAaOCAZAwggGMMB8GA1UdIwQY MBaAFFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1UdDgQWBBQdHZnXxdYRhWW2vg2m mJ1EB92h1zAvBgNVHREEKDAmghB3b29kbWFnYXppbmUuY29tghIqLndvb2RtYWdh emluZS5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipo dHRwOi8vY3JsLnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jcmwwdQYIKwYB BQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMy5hbWF6b250 cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDMuYW1hem9udHJ1 c3QuY29tL3IybTAzLmNlcjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8E AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQClTxBa7UrK3Uzo+loDClLp/GZ1Za3gIsKt LcPy+EpbEwibXJEylCbT8ccxwRrhy9T9W55ZZuOfA/wUQvpTZKMhqbrvY5n7MiZg EOyJjX47KBV7PcGFkFVdjLe0EDKNMUbQuo+xwC2kqqsJoeLZMAuiuwDtbCHwcaQL pu5lRmx2u2GCAEtNm2FTJrw8fbouW6+wv/a9m6ppRJo6rDj01Wmo1K3Y61okV3+8 8fx2FFU8J/PhToFCvwZHYZsDSgqSEQz4pG8566gzv/UU5ah+gFlDEdWxLM8zxxqO 18wUgn41WWD5FnlYPiys0OavRj6dOkV9RLOFAlRGF7MqBIST7r0D -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmQmJJDmJjVUltS5f84l xq0t3cTQLw9wYYuI0Nc0rujhNrvMtqBZAMPvGBJlx6agrDy1wX1tOPBNp+uHmzc0 H0mZ2KNYfnJ+/6g3j/sDdlUUx+ys5aaX1nTofpqHwhLFpiEJPu4lUn6xlcotvmxr 9a5DG9TeUtwjj/FdTafIKVyN3BVeYXt+S8WeJEEuTSVZo12gplXTpcpXoyRmkv7f P5xQwN8S/sHGMwv0hi+F0XwhXCjQ+AmlFCkK75bLkY1n5kUN3mZUtylRee2lqmUV lMlbLWga1atrW/wyMa7jzAiGM4IGvp8xBfdLRE4TkFG+NWqDe0vl4fL3AVZcKrA2 CQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18205483769120139264039912962226774612 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-10 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'woodmagazine.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18480177835318183537454753987433677408721692264244927485599468093381355527336151720879001025103053070812425398270220830859144148973468872058364800656372127615297206776706841644730144199665453919119947809105343757318133971863808354508820249495712199567887083185322305467458825508442017769103252625241111102610457689556941423728049857937105890920539940130231142429374762415006684665841232515788824817408842952729289522310153158087009819214284542596325471513439288060618669668558643479625393128853992024686222209588137967118667542516205008401234166868849922082458476928176456376822313369268901643180809754166101074261513 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1d1d99d7c5d6118565b6be0da6989d4407dda1d7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodmagazine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.woodmagazine.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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