dg-0123-38b8329.client-tls.adestra.com

Issued by Amazon

About this certificate

This digital certificate with serial number 06:34:b2:0c:d6:e5:9f:72:33:7c:e0:27:9a:fc:51:1f was issued on by Amazon.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dg-0123-38b8329.client-tls.adestra.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:34:b2:0c:d6:e5:9f:72:33:7c:e0:27:9a:fc:51:1f
Serial Number (int): 8248978697508095519983224022401569055
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 18:ac:81:90:d5:7b:23:0b:cc:56:27:cc:ff:de:f1:16:71:cc:b9:f1
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 39:5e:79:fb:11:b0:38:36:fb:7d:84:39:6f:83:49:03:35:2f:3f:9e
Fingerprint (sha256): 6b:b2:4d:44:a8:76:37:e0:63:d7:63:3f:cf:61:2f:b3:11:cc:58:45:5b:89:c7:45:a4:3a:02:16:e1:44:2d:a6

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate dg-0123-38b8329.client-tls.adestra.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dg-0123-38b8329.client-tls.adestra.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dg-0123-38b8329.client-tls.adestra.com
news.investmenteurope.net
nwl.ubm-info.com
drweil.sfsdayton.com
warranty.aig.com
email.ses4energy.com
newsletter.oecd.org
news.internationalinvestment.net
email.secureworkcomp.net
emarketing.nielsenbook.co.uk
email.pathwayvets.com
email.thehorse.com
email.scoot.co.uk
email.usa.nakedwines.com
email.prostatecanceruk.org
comment.regmovies.com
email.safevenues.co.uk
latammarketing.web.com
latamoperations.web.com
subscription.mygovcentral.com
ukmarketing.web.com
email.myvetmail.com
email.us.nakedwines.com
email.archstl.org

Other certificates including the domain name adestra.com

(limited to 100 certificates)
statuspage.io
www.adestra.com
adestra.com
*.adestra.com
statuspage.io
dg-0148-917b0d1.client-tls.adestra.com
dg-0140-62ed5ac.client-tls.adestra.com
prostatus.whitepages.com
dg-0109-77cf551.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0114-cba5df0.client-tls.adestra.com
dg-0148-917b0d1.client-tls.adestra.com
dg-0085-edb0cc1.client-tls.adestra.com
dg-0070-c174270.client-tls.adestra.com
dg-0150-2354af7.client-tls.adestra.com
dg-0067-b4f0d23.client-tls.adestra.com
dg-0148-917b0d1.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
dg-0008-7ca737e.client-tls.adestra.com
statuspage.io
dg-0037-9b515dd.client-tls.adestra.com
dg-0116-e68f716.client-tls.adestra.com
dg-0114-cba5df0.client-tls.adestra.com
dg-0085-edb0cc1.client-tls.adestra.com
apac-status.cayuse.com
statuspage.io
dg-0072-d73c216.client-tls.adestra.com
statuspage.io
dg-0037-9b515dd.client-tls.adestra.com
statuspage.io
dg-0123-38b8329.client-tls.adestra.com
dg-0002-02ce7f1.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0004-127170c.client-tls.adestra.com
statuspage.io
dg-0085-edb0cc1.client-tls.adestra.com
statuspage.io
dg-0149-55938d1.client-tls.adestra.com
dg-0114-cba5df0.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0087-960804b.client-tls.adestra.com
prostatus.whitepages.com
dg-0013-b3d7a9c.client-tls.adestra.com
dg-0148-917b0d1.client-tls.adestra.com
dg-0140-62ed5ac.client-tls.adestra.com
dg-0072-d73c216.client-tls.adestra.com
statuspage.io
dg-0125-dc75dcd.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0134-2e87d88.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
statuspage.io
dg-0037-9b515dd.client-tls.adestra.com
dg-0140-62ed5ac.client-tls.adestra.com
dg-0140-62ed5ac.client-tls.adestra.com
statuspage.io
prostatus.whitepages.com
prostatus.whitepages.com
statuspage.io
dg-0037-9b515dd.client-tls.adestra.com
statuspage.io
dg-0094-4765bd0.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0102-ddf9d6b.client-tls.adestra.com
statuspage.io
dg-0026-6664b28.client-tls.adestra.com
dg-0109-77cf551.client-tls.adestra.com
dg-0140-62ed5ac.client-tls.adestra.com
dg-0105-2d8a3ed.client-tls.adestra.com
dg-0116-e68f716.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0113-21a1b55.client-tls.adestra.com
statuspage.io
statuspage.io
prostatus.whitepages.com
dg-0031-fc95c30.client-tls.adestra.com
statuspage.io
statuspage.io
dg-0133-2f5a5bb.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
statuspage.io
dg-0098-f0d9eae.client-tls.adestra.com
dg-0154-9db8122.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0144-e509e47.client-tls.adestra.com
statuspage.io
dg-0146-7cb0364.client-tls.adestra.com
statuspage.io

Certificate

The complete raw certificate details for dg-0123-38b8329.client-tls.adestra.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV3rlhsXTN+KKRzPWBPN
gxJftcuAgay9E0RoGe9CAib5slaJ+MZtx29XvzmfwDbe/bV3bVggN2xh/TN0eJRT
ElTLj40NIuB19dHPO1uJWXA6FPBhSMB8uZKhMH/dIUk10ldUDXpreSfV5uFXFtDm
pk1oNXGill8EtIWeDsjvs/FyBmsx5hBJwp5N/Ytai8lwLQCXcJLJTKp+YTQEaV3V
bkH7OPG1mHLrPMLGVwSQd51+nUEkPevEkA/QT116Iau0gOj2qIZqDoNYwzq5/fZs
1XlbRNH4JeOe7YRFNwvTC2+VcseVPfi5yuPCywEeam/IPaNaShSxleFVPVXS0zHt
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8248978697508095519983224022401569055
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dg-0123-38b8329.client-tls.adestra.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21885540565070519321797827985246715681882176327939985549915212606798472330639290204749637493270341958328215159546754662652445527109888603111136807352706492053366838625178331372580860515415150300487286212809473382182105552116173202233687144795597738578830653501812573525257670657321713978530188020470938825840090311070745446083993985506420225395199413039948945749136637470883227316692241034182301769819513820048866581739284679181894567295610734693844213955183809100409343907881126551651312179015022851285573346604358073158994209727145385965828061708589585801151161930064504815697549326495270610041147913552347075308951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							18ac8190d57b230bcc5627ccffdef11671ccb9f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (591 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dg-0123-38b8329.client-tls.adestra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.investmenteurope.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwl.ubm-info.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drweil.sfsdayton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warranty.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.ses4energy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.oecd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.internationalinvestment.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.secureworkcomp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emarketing.nielsenbook.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.pathwayvets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.thehorse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.scoot.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.usa.nakedwines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.prostatecanceruk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comment.regmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.safevenues.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latammarketing.web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latamoperations.web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.mygovcentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukmarketing.web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.myvetmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.us.nakedwines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.archstl.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00c18d8bc8d4aecba98053aaa34cb31117d2a5d6f9f47257cb31dfec63066a32008c7ae40f1fd7dcc442a8e8a6fe815d850240c427f8e6712584329ca9377723ccb38424a847faef00b02405145cb0ec24f89d0a4f36fb7f7c5c63528e47d659e001374a10fe23d85e3e80745bb9ab2cbbd77f098550acb8deaf5fae5897364ccad7ab6a4be37f8c6ddf74b6247248bd05e2121801ac4afcb90aec3a8c3dc0537f8d51d7ba9614ffa687db0f71c5215caabb860407ddc0c001637f0d151035c8ed2c8e877ed9b05d701ef3aea14988a1088a8d6059d6ea7b5e7569b18867dd99e0c2f7e9f2aa30ce2372854d18098ff4c9cddeb98d50b0a1ea41cab5fa82c27cf6